suspectedhighSupply chainFirst reported Oct 20, 2026
OVHcloud: hijacked GitHub account used to swap CLI release archives with secret-stealing malware
An attacker used a hijacked contributor GitHub account to replace download archives on five existing releases of OVHcloud's command-line tool on October 19. OVHcloud says the replacement build was designed to steal secrets stored on the disk of machines running it, and the files were live on GitHub for up to 94 minutes, from 12:47 to 14:21 UTC.
Members only
The full record: the timeline and 3 linked reports
- Every update as it happened, with the status at each step
- Every report behind the record, newest first
- Alerts the moment OVHcloud — or anything else you track — is hit again
A free account is all it takes — no card, one minute.