Coder's registry infrastructure compromised to push malicious modules

Attackers breached Coder's Cloudflare infrastructure and added unauthorized registry servers that delivered malicious Terraform modules stealing credentials. The exposure window ran 07:35 to 21:45 UTC on Monday, August 31. Coder recommends rotating secrets and checking logs for coder-infra[.]com connections.