CERT24OVHcloud CLI releases backdoored on GitHub to steal developer secretsLoading data…
CERT24Threat Observatory
Period

OVHcloud CLI releases backdoored on GitHub to steal developer secrets

An attacker hijacked a developer’s GitHub account and modified OVHcloud CLI versions 0.11.0 through 0.15.0 to distribute malware designed to retrieve secrets from disk. OVHcloud said versions 0.10.0 and 0.16.0 were clean and considered the incident resolved.

← Back to intelligence

OVHcloud CLI releases backdoored on GitHub to steal developer secrets

An attacker hijacked a developer’s GitHub account and modified OVHcloud CLI versions 0.11.0 through 0.15.0 to distribute malware designed to retrieve secrets from disk. OVHcloud said versions 0.10.0 and 0.16.0 were clean and considered the incident resolved.