[
 {
  "value": "registry.coder.com",
  "type": "domain",
  "first_seen": "2026-09-03",
  "last_seen": "2026-09-08",
  "status": "expired",
  "confidence": "corroborated",
  "n_sources": 2,
  "stories": [
   "coder-s-registry-infrastructure-compromised-to-push-malicious-mo",
   "hackers-compromise-coder-module-registry-to-serve-malicious-pack"
  ],
  "sources": [
   "https://www.bleepingcomputer.com/news/security/coders-registry-infrastructure-compromised-to-push-malicious-modules/",
   "https://cyberpress.org/hackers-compromise-coder-module-registry/",
   "https://gbhackers.com/hackers-hijack-coder-module-registry/"
  ],
  "reason": "Compromised Coder module registry distributing trojanized Terraform templates (supply-chain hijack Aug 31 2026)"
 }
]