3 casos · pág. 1/1
A GitHub account belonging to an OVHcloud developer, compromised several months earlier, was used to push malicious code to unsuspecting users. Dark Reading attributes the activity to the GlassWorm threat actors. The available excerpt does not say what the malicious code did, which repositories or packages were affected, how many users we…
An attacker pushed forged commits to the default branches of two unrelated GitHub projects, hugo-paper and mevn-cli. The commits add a preinstall hook (scripts/preinstall.js) that downloads and silently runs a second-stage script from buildwithknexus.xyz during npm install or bun install. The commits copy the author, date and message of t…
On 19 October 2026 an attacker used a hijacked GitHub account of an OVHcloud contributor to overwrite the download archives of five existing OVHcloud CLI releases (v0.11.0 to v0.15.0) with a build designed to steal secrets from the disk of any machine that ran it (thehackernews.com, bleepingcomputer.com). The files were live for about 94 …
