ReversingLabs Blog
Graphalgo campaign moves upstream into infrastructure as code
A malware campaign that was discovered early this year targeting JavaScript and Python developers with cryptocurrency-related fake recruiter tasks has spread to Terraform providers and Go modules, according to research published recently by Aikido. It is the first time the company’s research team has observed malware distributed through Terraform providers. Aikido security researcher Oliver Smith wrote in a September post that the malware overlaps with the Graphalgo npm campaign that ReversingLabs researchers first reported in February.
Sources
- ReversingLabs Blog · 21-Oct-2026