OVHcloud CLI repository compromised and malicious releases published

OVHcloud reported that the repository for its command-line interface (CLI), used to manage the company’s services, was compromised in a supply-chain attack. The attacker used one developer’s GitHub account and added a malicious binary designed to retrieve secrets from disk. CLI versions 0.11.0 through 0.15.0 were affected; version 0.10.0 was clean, and the company stated that the upcoming 0.16.0 was also clean. The malicious version was detected and blocked within 94 minutes.