AI Summary

An attacker hijacked a contributor’s GitHub account and replaced the download archives on five existing releases of OVHcloud’s command‑line tool on Monday, October 19. The compromised account was used to upload new files that are a build designed to steal secrets stored on the disk of any machine that runs the tool. The cloud provider confirmed the replacement of the archives and the malicious nature of the new files. No further details about the attacker or the extent of the compromise were provided.

AI summaries can be wrong sometimes—always verify important details using the source article.