#ovhcloud
-
Hijacked account: five OVHcloud CLI releases swapped for secret-stealing malware
An attacker used a hijacked contributor account to replace the archives in five releases of OVHcloud's command-line tool. The malicious build stole secrets from disk and was live on GitHub for just 94 minutes.