OVHcloud CLI releases backdoored on GitHub to steal developer secrets

Attackers compromised OVHcloud's open-source CLI tool on GitHub to distribute information-stealing malware, the French cloud provider warned. The backdoored releases targeted developers, aiming to steal secrets and credentials. OVHcloud urged users to check for compromised versions and rotate any exposed keys. The incident highlights supply-chain risks in open-source software distribution.