OVHcloud warns of malicious code in compromised CLI tool releases

<p>French cloud and hosting provider OVHcloud has issued a security alert to users regarding the compromise of its open-source command-line interface (CLI) tool. The company confirmed that unauthorized actors successfully modified its software releases hosted on GitHub to include malicious code.</p><p>According to the company, these compromised versions were designed to function as information-stealing malware. The incident highlights the risks associated with supply chain security, where attackers target developer tools to gain access to sensitive information or credentials held by users of those tools.</p><p>OVHcloud is currently working to address the security breach and inform its user base. Users who have interacted with the affected CLI tool releases are advised to take necessary precautions to secure their environments and protect any developer secrets or credentials that may have been exposed.</p>

Source: BleepingComputer
Original article: https://www.bleepingcomputer.com/news/security/ovhcloud-cli-releases-backdoored-on-github-to-steal-developer-secrets/