OVHcloud warns that attackers compromised its open-source command-line interface tool to distribute information-stealing malware. Developers who recently downloaded the utility risk having their API keys and credentials exfiltrated. Organizations must immediately audit for malicious releases and revoke potentially exposed secrets.

supply-chaingithubmalwaredeveloper-secrets
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →