OVHcloud CLI Supply Chain Attack
A hacker compromised a developer's GitHub account and planted a malicious binary in OVHcloud's official CLI (versions v0.11.0–v0.15.0), designed to steal secrets.
What we know
An account on X retweeted the IntCyberDigest breaking alert that OVHcloud's official CLI was hijacked in a supply chain attack. The attacker used a developer's GitHub account to plant a malicious binary in versions v0.11.0 through v0.15.0, with the payload designed to exfiltrate secrets. Users of those versions should rotate credentials and upgrade immediately.
By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.