A hijacked Cloudflare API key made Coder's own registry serve credential-stealing modules for 14 hours. https://intel.threadlinqs.com/threat/TL-2026-2373 #ThreatIntel #Coder #GHSAvx42ghc9gw65 #Terraform