OVHcloud's official CLI tool on GitHub was compromised: a hacker used a developer's GitHub account to slip a malicious binary into the release published at 14:47, whose job was to harvest all secrets on the user's disk. OVHcloud detected and blocked it at 16:21 — about 90 minutes of exposure. A customer report tipped them off.
If you downloaded the latest CLI today, update again immediately or delete it. Anyone who ran an affected version should rotate every secret on their disk. Analysis of the binary is ongoing.
This article was aggregated automatically by CyberWire Daily's newsfeed engine. Original reporting: agihunt.info.
