OVHcloud's official CLI compromised: hacker planted secret-stealing binary in 5 releases
IgorCarron · x · 2026-10-20
What happened
OVHcloud's official CLI tool on GitHub was compromised: a hacker used a developer's GitHub account to slip a malicious binary into the release published at 14:47, whose job was to harvest all secrets on the user's disk. OVHcloud detected and blocked it at 16:21 — about 90 minutes of exposure. A customer report tipped them off.
Affected versions and response
- Compromised: v0.11.0 through v0.15.0
- Clean: v0.10.0 and the upcoming v0.16.0
- Initial checks found no other repos affected; the incident path has been traced
What users should do
If you downloaded the latest CLI today, update again immediately or delete it. Anyone who ran an affected version should rotate every secret on their disk. Analysis of the binary is ongoing.
More from Safety
- Sesame AI accused of mapping user voices, critic banned from Discord — WIDOWMAKER050 · 2026-10-20
- DHS orders federal civilian agencies to remove DeepSeek and third-party products built on it — rickasaurus · 2026-10-20
- Academic-budget detector catches 2.4x more AI-written math proofs than commercial tools — danish037 · 2026-10-20
- Cloudflare MCP Server adds step-up auth: agents request scopes on demand — irvinebroque · 2026-10-20
- UK reportedly weighs EU's CADA law that would bar its government from non-European AI models — NathanpmYoung · 2026-10-20
- Malta pays €4 million for Microsoft Copilot through 2028 with unchecked lock-in — YvesMulkers · 2026-10-20