malware
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
Medium
Summary
The vulnerability stemmed from the lack of release immutability on GitHub, allowing a contributor's hijacked account to replace existing releases with a build containing a secret-stealing payload. OVHcloud has since enabled release immutability and published a clean version of the CLI.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data