Tag: ovhcloud
2 articles
OVHcloud CLI Compromised to Harvest Developer Secrets
OVHcloud's open-source command-line interface was briefly hijacked by hackers who used it to steal developer secrets, with the attack detected and blocked just over an hour after it began. The compromised versions, which affected releases from v0.11.0 to v0.15.0, were altered by an attacker who gained control of a developer's GitHub account.
OVHcloud CLI Releases Compromised to Distribute Malware
Malicious hackers hijacked an OVHcloud contributor account, swapping five CLI release archives on GitHub with malware that steals sensitive information - and it was live for a shocking 94 minutes before being detected. The incident highlights the importance of release immutability, a feature that OVHcloud had not enabled, allowing attackers to modify published files directly.