Coder template build/version event during malicious registry exposure window

Arnold Chan@slaz

•updated Sep 7, 2026•0•0•1

Detects anomalous actions within the Coder registry, such as template creation, version updates, or dry-run/workspace builds with module caching disabled, that occurred during a known registry compromise window on August 31, 2026.