Graphalgo-linked malware hid in Terraform providers and Go packages, targeting developers and cloud infrastructure.