Spectra Assure Free Trial
Get your 14-day free trial of Spectra Assure for Software Supply Chain Security
Get Free TrialMore about Spectra Assure Free TrialAttacks Grow in Sophistication, Targeting AI, Commercial Software, Crypto, and Open Source

First reported by ReversingLabs in February, the malware has moved to Terraform providers and Go modules. Here’s what you need to know.

Source scanners, SBOMs, certificate managers and questionnaires all answer a different question — and none of them inspects the software that shipped.

ReversingLabs expanded the published hashes into a staging server, five stagers, two lure files and the domain-to-server links.