Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
Malicious Terraform providers and Go modules deliver Graphalgo-linked Go malware using blockchain and Slack for command and control.
More info