OVHcloud

Reported Context (7)

French cloud computing and web hosting company OVHcloud says a hacker used the GitHub account of one of its developers to plant a secret-stealing binary in its official command-line interface (CLI) tool. Hijacked OVHcloud Developer Account Used to Plant Secret-Stealing Binary in CLI
[00:12] Stop & Shop, OVH Cloud, Microsoft, Plex, Security Weekly #626: Stop & Shop Breach, OVH Cloud Malware, and Plex Exploits
> "Most recently, in October 2025, OVHcloud and Romania-based cybersecurity vendor Bitdefender announced the launch of a sovereign cybersecurity platform hosted on OVHcloud’s SecNumCloud-certified service," IDC noted[^1] Bitdefender 2026 Survey Highlights Breach Disclosure Pressure and Shadow AI Blind Spots
used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build Hijacked GitHub Account Used to Replace Five OVHcloud CLI Releases With Secret-Stealing Malware
OVHcloud CLI releases backdoored on GitHub to steal developer secrets Backdoored OVHcloud CLI Releases Targeted Developers’ Secrets

Malware (1)

People (12)

Threat Actors (6)

MITRE ATT&CK (18)

Vendors (6)

Products (8)

Tools (1)

Industries (5)

Countries (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.