Uzha
Sign in
← Today's brief

Security · Updated 20 Oct, 01:51 pm IST

Hackers Replace Five OVHcloud CLI Releases with Secret-Stealing Build

Image: The Hacker News

Why it matters for readers: It shows how attackers can slip malicious code into widely distributed tools by hijacking accounts on code hosts.

  • An attacker used a contributor's GitHub account to replace download archives on five OVHcloud CLI releases.1
  • The replaced files were a build designed to steal secrets stored on the disk of any machine that runs it.1
  • The malicious files were live on GitHub for up to 94 minutes, between 12:47 and 14:21 UTC on October 19.1
SaveAsk about this story
Report a mistake in this summary

Get a brief like this every morning

Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.

Get started