OVHcloud CLI Hit by Supply-Chain Attack Stealing Local Secrets

OVHcloud's official CLI was compromised in a supply-chain attack: a developer's GitHub account was hijacked to inject a credential-stealing binary into releases v0.11.0–v0.15.0, prompting security concerns and calls for users to rotate secrets.

2026-10-20 ~ 2026-10-20 · 2 related posts

• OVHcloud's official CLI compromised: hacker planted secret-stealing binary in 5 releases — IgorCarron · 2026-10-20
• OVHcloud CLI hit by supply chain attack: malicious binaries planted in v0.11.0–v0.15.0 releases — evilsocket · 2026-10-20