OVH supply chain attack: hijacked GitHub account replaced OVHcloud CLI binaries with backdoored builds
cyb3rops · x · 2026-10-22
- OVHcloud suffered a supply chain compromise: attackers took over a developer's GitHub account and replaced existing OVHcloud CLI release binaries with backdoored versions.
- Per the official notice: affected release assets span v0.11.0 to v0.15.0, with the tampering window on 19 October between 14:47 and 16:21 (UTC+2).
- Only users who installed the CLI during that window are affected; earlier downloads are clean. Source code and the build chain were untouched, and no other repository projects were impacted.
More from Safety
- Sanders calls to pause autonomous AI agents in bank accounts; critics push back — AIandDesign · 2026-10-23
- TechPolicy essay: system prompts are weak evidence of AI safety, outputs must be evaluated — mmitchell_ai · 2026-10-23
- Anthropic's deputy security chief warns cyber threats will get 'a lot worse before they get better' — Polymarket · 2026-10-23
- AI cyberattacks could paradoxically accelerate AI development in an offense-defense arms race — kimmonismus · 2026-10-23
- AI Now's People's AI Assembly spotlights data center opposition and labor rights — AINowInstitute · 2026-10-23
- Cloudflare CEO: Next two years of AI cyberattacks will be terrifying but make the internet more secure — johncoogan · 2026-10-23