October 21, 2026
- Five OVHcloud CLI releases were replaced with secret-stealing builds for up to 94 minutes on October 19. A hijacked contributor account modified the GitHub assets for versions 0.11.0 through 0.15.0. OVHcloud says its initial checks found no other affected repository and advises anyone who executed the files to rotate secrets stored on disk; version 0.10.0 was clean. The Stack and BleepingComputer have the details. · Cloud & Software Supply Chain