Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI
French cloud computing and web hosting company OVHcloud says a hacker used the GitHub account of one of its developers to plant a secret-stealing binary in its official command-line interface (CLI) tool.
The supply chain incident occurred on October 19, and OVHcloud lists versions v0.11.0 through v0.15.0 as compromised. Version 0.10.0 and the newly released version 0.16.0 are clean.
“The hacker used the GitHub account of one of the developers and added a binary whose job is to retrieve secrets from the disk. The quality of the binary is poor but it can go all the way,” OVHcloud founder Octave Klaba said on X (translated from French).
Klaba said the compromised version appeared at 14:47 Paris time and was blocked at 16:21, after a customer reported the issue. According to OpenSourceMalware, a user flagged the tampering publicly on GitHub after an automated hash check failed.
The CI/CD pipelines were...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
