Terraform Init Downloading from Typosquatted HashiCorp Registry

Ibrahim Saud@tektrix

•updated Sep 21, 2026•2•0•6

Detects the use of 'terraform init' where the command line arguments reference known typosquatted HashiCorp registry domains. This behavior is indicative of a supply chain attack attempting to pull malicious providers or modules from an adversary-controlled source.