Tue, Oct 20 Breaches and campaigns
- Attacks confirmed
OVHcloud CLI downloads swapped for a build that steals secrets from disk
An attacker used a developer’s GitHub account to replace files in five releases, and the malicious files were available from 8:47 to 10:21 a.m. ET on Oct 19.