GoKawiilOVHcloud CLI tool compromised on GitHub, served secret-stealing malware
OVHcloud confirmed that an attacker hijacked a developer's GitHub account and altered releases 0.11.0 through 0.15.0 of its open-source CLI tool to distribute information-stealing malware. CEO Octave Klaba said the tainted release went live at 14:47 on October 19 and was pulled by 16:21 after a customer flagged it, while versions 0.10.0 and 0.16.0 remained unaffected.