Attackers compromise Coder's Cloudflare infrastructure and add unauthorized servers to the project's module registry, delivering malicious Terraform modules to a subset of users. Coder's registry, registry.coder.com, serves as the package-hosting site where developers source components for workspace templates. Because the attacker gains