GoKawiilOVHcloud CLI Tool on GitHub Compromised by GlassWorm-Linked Attackers
OVHcloud confirmed that a compromised developer GitHub account was used to replace legitimate releases of its open-source ovhcloud-cli tool with malicious binaries designed to steal secrets from users' disks. The tainted versions were available for about 90 minutes and downloaded roughly 250 times before a user flagged suspicious activity, prompting OVHcloud to remove them within 30 minutes. CEO Octave Klaba urged affected users to update or delete the tool and rotate any exposed secrets.