IaC

Malware Reached the Terraform Registry: What terraform init Actually Trusts

Malicious Terraform providers shipped through the official registry, and a second campaign poisoned lock files. What the provider supply chain verifies, what it does not, and how to pin it down.