OVHcloud CLI downloads swapped for a build that steals secrets from disk

OpenSourceMalware, which rebuilt the timeline from GitHub’s server records, says the attacker replaced files on five existing releases through GitHub’s ordinary Releases API. It uploaded each release’s checksum file last, so the published hashes matched the new binaries. The source code was never touched, and no build pipeline ran. The binary was built on a workstation from a later, unreleased commit with uncommitted changes. Built outside the release pipeline, it reports a development version instead of a release tag.

OpenSourceMalware says the malicious files reached anyone who installed or updated on macOS, Linux x86_64 or arm64, or Windows x86_64 during that time. That includes the install script, the Homebrew cask, direct downloads and build jobs that fetch release files. Installs with go install, source builds and the ovhcom/ovhcloud-cli Docker image were unaffected, as were the i386, Windows arm64 and WebAssembly builds and v0.10.0.

A user whose build job pins file hashes caught the swap and reported it in a public issue, since the project had no private reporting channel. OVHcloud deleted the files and published v0.16.0 as an immutable release with a GitHub attestation, uploaded by a service account rather than a person. Klaba says initial checks found no other repository affected, and OVHcloud has promised a post-mortem.

OVHcloud hasn’t said how the developer’s account was taken over, what files the binary reads, where it sends them or how many times the files were downloaded. OpenSourceMalware couldn’t study the binary because the files were deleted before anyone archived them, and it has published only one malicious hash, from the user’s pinned check.

In early March, an attacker used the same account to plant a hidden loader in the developer’s own repositories, OpenSourceMalware found. The loader finds its next stage through a Solana wallet that appears in public GlassWorm indicator lists. OpenSourceMalware calls the link between that intrusion and the October swap its own inference, resting on the shared account.