An attacker compromised a contributor’s GitHub account to replace download archives across five OVHcloud CLI releases with malicious builds. These altered binaries were designed to harvest sensitive secrets stored locally on machines executing the tool. The modified files remained accessible for nearly 94 minutes before being remediated.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →