highMalware
OVHcloud CLI Releases Compromised on GitHub to Distribute Secret-Stealing Malware
On October 19, 2026, an attacker who gained access to a contributor's GitHub account replaced the download archives for five existing releases of the OVHcloud command-line tool. The malicious files were live for up to 94 minutes before being removed, and are designed to steal secrets stored on the disk of any machine that executes them. OVHcloud confirmed the account was hijacked and has since removed the compromised releases.
The Hacker News1 min read