OVHcloud CLI

Reported Context (3)

for up to 94 minutes, from 12:47 to 14:21 UTC, and reached only people who installed or updated the OVHcloud CLI during that window, via a path that checks for no hash, on macOS, Linux x86_64 or arm64, or Windows Hijacked GitHub Account Used to Replace Five OVHcloud CLI Releases With Secret-Stealing Malware
OVHcloud CLI releases backdoored on GitHub to steal developer secrets Backdoored OVHcloud CLI Releases Targeted Developers’ Secrets
OVHcloud CLI supply chain compromise: release assets replaced through a GlassWorm-hijacked contributor account Hijacked Contributor Account Used to Replace OVHcloud CLI Release Assets

Malware (1)

People (1)

Threat Actors (1)

MITRE ATT&CK (7)

Vendors (2)

Products (1)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.