Hackers Plant Secret-Stealing Malware in OVHcloud CLI Releases on GitHub
Attackers used a hijacked contributor's GitHub account to replace download files on five OVHcloud command-line tool releases on October 19, 2026, distributing malware that steals secrets from affected machines; researchers link the account compromise to the GlassWorm threat group.
4newsrooms
4articles
32 hoursrunning
Oct 20first seen
Ask Scout
Scout answers questions about this story using only the coverage below.
Coverage over time
Articles
| Oct 21, 9:50 AM | darkreading.com | OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors |
| Oct 20, 11:02 PM | securityweek.com | Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI |
| Oct 20, 4:31 AM | bleepingcomputer.com | OVHcloud CLI releases backdoored on GitHub to steal developer secrets |
| Oct 20, 1:21 AM | thehackernews.com | Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware |