Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

Summary

An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider says. They were live on GitHub for up to 94 minutes, from 12:47 to 14:21 UTC,

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.