{
  "type": "bundle",
  "id": "bundle--e9c7217c-0101-4176-8173-93ff6eac902f",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-09-01T00:00:00.000Z",
      "modified": "2026-09-01T00:00:00.000Z",
      "name": "Optimus Labs · Civilizations",
      "identity_class": "organization",
      "description": "Threat research team at Optimus Labs. Agentic AI attack surface research.",
      "contact_information": "https://optimuslabs.io/research/briefings"
    },
    {
      "type": "report",
      "spec_version": "2.1",
      "id": "report--46e52090-0101-449a-87e4-440a47e6852a",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-09-01T00:00:00.000Z",
      "modified": "2026-09-01T00:00:00.000Z",
      "name": "When the Supply-Chain Attack Has No CVE: Inside the Coder Registry Hijack",
      "description": "Coder's own delivery infrastructure was hijacked to serve credential-stealing modules from the real registry.coder.com. No CVE, no poisoned package, nothing for a scanner to match.\n\nBetween 07:35 and 21:45 UTC on August 31, 2026, an attacker added unauthorized IP addresses to the Cloudflare pool behind registry.coder.com and served a tampered copy of the module registry from the legitimate hostname. The poisoned modules ran dlp.sh / dlp-docker.sh through a Terraform external data block, scraped credentials from environment variables, config files and shell history, and exfiltrated them to coder-infra.com, a lookalike registered three days earlier. Coder disclosed it as GHSA-vx42-ghc9-gw65 (CVSS 9.0) the next day.",
      "published": "2026-09-01T00:00:00.000Z",
      "report_types": [
        "threat-report"
      ],
      "confidence": 85,
      "labels": [
        "Supply chain",
        "Vendor breach",
        "Coding agent",
        "Supply Chain nth Party Risk",
        "AI Asset Supply Chain Security",
        "Agentware Lifecycle Security",
        "Agent Permissions",
        "severity:critical"
      ],
      "object_refs": [
        "indicator--a8d214b4-0103-40c5-8562-e4b8fa9d5b57",
        "indicator--ae3f2ea4-0102-4679-850c-28723af41851",
        "indicator--b13af0bc-0102-424a-84fc-7dd0ab23dc30",
        "indicator--d2c85fb0-0102-48cb-82c3-59885d3ca987",
        "indicator--6bb94c50-0107-4efa-8abe-52aa6cc06b4a",
        "vulnerability--db4808a0-0100-4ccb-825b-7ab95dc48656",
        "software--f8fed034-0101-4742-8600-e88afa009776",
        "software--6ec1d894-0102-4107-8fc3-e9936fc4099b",
        "software--1d506540-0101-47b9-8c51-f2f91e51fcf9",
        "software--e1e62eb0-0101-44b3-81f1-845fde2e7c36",
        "software--5fd461a8-0101-4bda-8ed5-aa7260d62d82",
        "software--6b346830-0102-4e50-8a36-76606c368680",
        "software--03b6a3d0-0101-401d-82b7-73cd04b873ed",
        "software--0d9a2048-0101-47c3-8c9b-f78b0e9bf80b",
        "software--d01575e0-0101-44bf-82ee-b5ea1d1174a9",
        "software--0fe5ed04-0102-4c73-8ee7-f17710e80977"
      ],
      "external_references": [
        {
          "source_name": "Optimus Labs · Civilizations",
          "url": "https://optimuslabs.io/research/briefings/coder-registry-infrastructure-hijack"
        },
        {
          "source_name": "Coder advisory GHSA-vx42-ghc9-gw65: window, IoCs, SQL, rotation, patched builds",
          "url": "https://github.com/coder/coder/security/advisories/GHSA-vx42-ghc9-gw65"
        },
        {
          "source_name": "Coder Discord #announcements (Sep 1): second source",
          "url": "https://answeroverflow.com/m/1544144200545865728"
        },
        {
          "source_name": "CVE-2026-46354 (GHSA-6x44-w3xg-hqqf): prior unauth PKCS#7 bypass, CVSS 9.1",
          "url": "https://github.com/coder/coder/security/advisories/GHSA-6x44-w3xg-hqqf"
        },
        {
          "source_name": "BleepingComputer (Sep 3): press pickup, relays the advisory",
          "url": "https://www.bleepingcomputer.com/news/security/coders-registry-infrastructure-compromised/"
        },
        {
          "source_name": "registry.coder.com: the delivery channel served maliciously",
          "url": "https://registry.coder.com"
        },
        {
          "source_name": "coder/coder: \"Secure environments for developers and their agents\"",
          "url": "https://github.com/coder/coder"
        },
        {
          "source_name": "Coder success stories: install base",
          "url": "https://coder.com/success-stories"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--a8d214b4-0103-40c5-8562-e4b8fa9d5b57",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-09-01T00:00:00.000Z",
      "modified": "2026-09-01T00:00:00.000Z",
      "name": "domain: www.coder-infra.com",
      "description": "domain: www[.]coder-infra[.]com (registered 2026-08-28)",
      "indicator_types": [
        "compromised",
        "malicious-activity"
      ],
      "pattern": "[domain-name:value = 'www.coder-infra.com']",
      "pattern_type": "stix",
      "valid_from": "2026-09-01T00:00:00.000Z",
      "labels": [
        "coder-registry-infrastructure-hijack",
        "supply-chain",
        "vendor-breach",
        "coding-agent"
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--ae3f2ea4-0102-4679-850c-28723af41851",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-09-01T00:00:00.000Z",
      "modified": "2026-09-01T00:00:00.000Z",
      "name": "ipv4: 199.91.220.205",
      "description": "ipv4: 199.91.220[.]205",
      "indicator_types": [
        "compromised",
        "malicious-activity"
      ],
      "pattern": "[ipv4-addr:value = '199.91.220.205']",
      "pattern_type": "stix",
      "valid_from": "2026-09-01T00:00:00.000Z",
      "labels": [
        "coder-registry-infrastructure-hijack",
        "supply-chain",
        "vendor-breach",
        "coding-agent"
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--b13af0bc-0102-424a-84fc-7dd0ab23dc30",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-09-01T00:00:00.000Z",
      "modified": "2026-09-01T00:00:00.000Z",
      "name": "file: dlp-docker.sh",
      "description": "file: dlp-docker.sh",
      "indicator_types": [
        "compromised",
        "malicious-activity"
      ],
      "pattern": "[file:name = 'dlp-docker.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-09-01T00:00:00.000Z",
      "labels": [
        "coder-registry-infrastructure-hijack",
        "supply-chain",
        "vendor-breach",
        "coding-agent"
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--d2c85fb0-0102-48cb-82c3-59885d3ca987",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-09-01T00:00:00.000Z",
      "modified": "2026-09-01T00:00:00.000Z",
      "name": "file: dlp.sh",
      "description": "file: dlp.sh (five variants observed)",
      "indicator_types": [
        "compromised",
        "malicious-activity"
      ],
      "pattern": "[file:name = 'dlp.sh']",
      "pattern_type": "stix",
      "valid_from": "2026-09-01T00:00:00.000Z",
      "labels": [
        "coder-registry-infrastructure-hijack",
        "supply-chain",
        "vendor-breach",
        "coding-agent"
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--6bb94c50-0107-4efa-8abe-52aa6cc06b4a",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-09-01T00:00:00.000Z",
      "modified": "2026-09-01T00:00:00.000Z",
      "name": "sha256: 7190a17c593276d7fd71c4863a4bc0b6c957ed14249288e6f64c5540e2c49398",
      "description": "sha256: 7190a17c593276d7fd71c4863a4bc0b6c957ed14249288e6f64c5540e2c49398 (dlp-docker.sh)",
      "indicator_types": [
        "compromised",
        "malicious-activity"
      ],
      "pattern": "[file:hashes.'SHA-256' = '7190a17c593276d7fd71c4863a4bc0b6c957ed14249288e6f64c5540e2c49398']",
      "pattern_type": "stix",
      "valid_from": "2026-09-01T00:00:00.000Z",
      "labels": [
        "coder-registry-infrastructure-hijack",
        "supply-chain",
        "vendor-breach",
        "coding-agent"
      ]
    },
    {
      "type": "vulnerability",
      "spec_version": "2.1",
      "id": "vulnerability--db4808a0-0100-4ccb-825b-7ab95dc48656",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-09-01T00:00:00.000Z",
      "modified": "2026-09-01T00:00:00.000Z",
      "name": "GHSA-vx42-ghc9-gw65",
      "description": "advisory: GHSA-vx42-ghc9-gw65",
      "external_references": [
        {
          "source_name": "github-advisory",
          "external_id": "GHSA-vx42-ghc9-gw65",
          "url": "https://github.com/advisories/GHSA-vx42-ghc9-gw65"
        }
      ]
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--f8fed034-0101-4742-8600-e88afa009776",
      "name": "Coder"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--6ec1d894-0102-4107-8fc3-e9936fc4099b",
      "name": "Cloudflare"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--1d506540-0101-47b9-8c51-f2f91e51fcf9",
      "name": "AWS"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--e1e62eb0-0101-44b3-81f1-845fde2e7c36",
      "name": "GCP"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--5fd461a8-0101-4bda-8ed5-aa7260d62d82",
      "name": "Azure"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--6b346830-0102-4e50-8a36-76606c368680",
      "name": "Anthropic"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--03b6a3d0-0101-401d-82b7-73cd04b873ed",
      "name": "OpenAI"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--0d9a2048-0101-47c3-8c9b-f78b0e9bf80b",
      "name": "GitHub"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--d01575e0-0101-44bf-82ee-b5ea1d1174a9",
      "name": "GitLab"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--0fe5ed04-0102-4c73-8ee7-f17710e80977",
      "name": "Bitbucket"
    }
  ]
}