An attacker used a contributor’s GitHub account to replace the download archives on five existing releases of OVHcloud’s command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider says.They were live on GitHub for up to 94 minutes, from 12:47 to 14:21 UTC,
First seen on thehackernews.com
Jump to article: thehackernews.com/2026/10/hackers-hijack-five-ovhcloud-cli.html
