security1 publisher
A DPRK-linked package campaign has started publishing to HashiCorp's Terraform Registry
Aikido found the Graphalgo implant inside two Terraform providers and two Go modules. The Go build polls a hard-coded testnet contract every three seconds and keeps a Slack bot channel open as its second route.
Publishers:thehackernews.com
Reality
- Evidence66
- Adoption21
- Hype gap+14
- Incentives72
- Confidence58