CYBERSECURITYTRACKER
Permanent story citation

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10712

As cited

Copy frozen at (site build).

threat intel

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

An attacker compromised a contributor's GitHub account and replaced download archives for five releases of OVHcloud's command-line interface tool with malware designed to steal secrets from infected machines. The malicious files remained accessible on GitHub for approximately 94 minutes on October 19, 2026, before being removed.

Why it matters: Organizations and developers who downloaded the OVHcloud CLI tool during that window may have malware on their systems; immediate verification of installation integrity and secret rotation are required.

VendorsGitHub
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

An attacker compromised a contributor's GitHub account and replaced download archives for five releases of OVHcloud's command-line interface tool with malware designed to steal secrets from infected machines. The malicious files remained accessible on GitHub for approximately 94 minutes on October 19, 2026, before being removed.

Why it matters: Organizations and developers who downloaded the OVHcloud CLI tool during that window may have malware on their systems; immediate verification of installation integrity and secret rotation are required.

VendorsGitHub
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

An attacker compromised a contributor's GitHub account and replaced download archives for five releases of OVHcloud's command-line interface tool with malware designed to steal secrets from infected machines. The malicious files remained accessible on GitHub for approximately 94 minutes on October 19, 2026, before being removed.

Why it matters: Organizations and developers who downloaded the OVHcloud CLI tool during that window may have malware on their systems; immediate verification of installation integrity and secret rotation are required.

VendorsGitHub
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

An attacker compromised a contributor's GitHub account and replaced download archives for five releases of OVHcloud's command-line interface tool with malware designed to steal secrets from infected machines. The malicious files remained accessible on GitHub for approximately 94 minutes on October 19, 2026, before being removed.

Why it matters: Organizations and developers who downloaded the OVHcloud CLI tool during that window may have malware on their systems; immediate verification of installation integrity and secret rotation are required.

VendorsGitHub
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary