Attackers Exploit GitHub Contributor Account to Inject Secret-Stealing Malware into OVHcloud CLI Releases

Attackers exploited a compromised GitHub contributor account to replace OVHcloud CLI release archives with malware designed to steal disk-stored secrets. The malicious files were available for 94 minutes before being removed.

An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider says.

They were live on GitHub for up to 94 minutes, from 12:47 to 14:21 UTC,

Read original article