Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

AI Summary

An attacker hijacked a contributor's GitHub account on October 19 and replaced download archives across five existing releases of OVHcloud's open-source CLI tool with secret-stealing malware, keeping the malicious files live for up to 94 minutes (12:47–14:21 UTC). Any developer who ran the OVHcloud CLI during that window may have had credentials and secrets on disk exfiltrated. This incident underscores the persistent risk of GitHub-based supply chain attacks targeting developer tooling.

Read full article → https://thehackernews.com/2026/10/hackers-hijack-f…

Relevance score: 80.0/100

# More from October 21

1
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert The Hacker News
2
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader The Hacker News
3
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software The Hacker News
4
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA The Hacker News
5
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution The Hacker News
6
AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign SecurityWeek
7
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death Graham Cluley
9
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election The Hacker News
10
ConnectWise customers hit by supply-chain attack linked to compromised API secret CyberScoop