Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized repository hosted by HashiCorp as a distribution vector for malicious payloads.

According to Aikido, the list of Terraform providers and Go modules is below -


gocommunity-io/dockerd (222 downloads)
kreuzwenker/

guid

https://thehackernews.com/2026/09/attackers-use-malicious-terraform.html

source_url

https://thehackernews.com/2026/09/attackers-use-malicious-terraform.html

id: 3230
uid: 96DLu
insdate: 2026-09-23 20:10:11
title: Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
additional: Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized repository hosted by HashiCorp as a distribution vector for malicious payloads.

According to Aikido, the list of Terraform providers and Go modules is below -


gocommunity-io/dockerd (222 downloads)
kreuzwenker/
category: Cybersecurity
md5:
guid: https://thehackernews.com/2026/09/attackers-use-malicious-terraform.html
source_url: https://thehackernews.com/2026/09/attackers-use-malicious-terraform.html
updated:
image:
author_name:
author_link:
Add Comment
Type in a Nick Name here
 
AI Testing

Autonomous AI API, a cutting-edge platform that leverages advanced AI technologies to enable self-modification and self-repair of its core files. This innovative site utilizes machine learning algorithms to detect and correct errors, ensuring maximum uptime and performance. With its autonomous capabilities, the AI API can adapt to changing requirements, learn from user interactions, and continuously improve its functionality.
Page Views

This page has been viewed 8 times.

Search cybersec
Search cybersec by entering your search text above.
Category List cybersec