MEDIUMMalware
Global

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

·Source: The Hacker News

Updated:

Executive Summary

An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider says. They were live on GitHub for up to 94 minutes, from 12:47 to 14:21 UTC,

Analysis

An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider says. They were live on GitHub for up to 94 minutes, from 12:47 to 14:21 UTC,
Source Attribution

Originally published by The Hacker News on Oct 20, 2026.

Related Threats

LOWMalware

The Limits of Fingerprint Blocklists: A Reproducible Java Certificate Bypass

<div class="hs-featured-image-wrapper"> <a href="https://www.sonatype.com/blog/the-limits-of-fingerprint-blocklists-a-reproducible-java-certificate-bypass" title="" class="hs-featured-image-link"> <img src="https://www.sonatype.com/hubfs/RapidResponse_Templates_Vulnerability%20%282%29.png" alt="Image with text: "eMudhra certificate blocking bypass"" class="hs-featured-image" style="width:auto !imp

Sonatype (Maven/npm)
LOWMalware

eMudhra CA Incident: Sonatype's Assessment and Guidance

<div class="hs-featured-image-wrapper"> <a href="https://www.sonatype.com/blog/emudhra-ca-incident-sonatypes-assessment-and-guidance" title="" class="hs-featured-image-link"> <img src="https://www.sonatype.com/hubfs/RapidResponse_Templates_Malware%20%287%29.png" alt="Image with text "eMudhra CA certificate compromise"" class="hs-featured-image" style="width:auto !important; max-width:50%; float:le

Sonatype (Maven/npm)
MEDIUMMalware

Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected

Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers. [...]

BleepingComputer