/
affected_products:"OVHcloud CLI v0.15.0" × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · high

OVHcloud CLI GitHub repository compromised via developer account to distribute secret-stealing binary

OVHcloud disclosed a supply-chain attack on its command-line interface (CLI) repository on GitHub. An attacker used a compromised developer's GitHub account to insert a malicious binary designed to retrieve secrets from users' disks. CEO Octave Klaba confirmed the incident on 19 October 2026 after a customer report. The compromised releas…

cloud services technology
thehackernews.com · high

Attacker hijacks contributor GitHub account to swap binaries on five OVHcloud CLI releases with secret-stealing build

On 19 October 2026 an attacker used a hijacked contributor's GitHub account to replace the download archives on five existing releases (v0.11.0 to v0.15.0) of OVHcloud CLI. The swapped files were a build designed to steal secrets stored on the disk of any machine that ran it. They were live from 12:47 to 14:21 UTC (up to 94 minutes) for m…

technology cloud services