International Cyber Digest on X: "‼️ BREAKING: OVHcloud's official CLI was hijacked in a ...

X • October 20, 2026

International Cyber Digest @IntCyberDigest ‼️ BREAKING: OVHcloud's official CLI was hijacked in a supply chain attack. A hacker used a developer's GitHub account to plant a binary built to grab secrets in versions v0.11.0 to v0.15.0. 6:15 AM · Oct 20, 2026 · 47.9K Views 22

International Cyber Digest @IntCyberDigest 9h Source: thestack.technology/ovhcloud-cli-r…

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

OVHcloud CLI Compromised in Supply Chain Attack On October 19, 2026, a hacker hijacked a developer's GitHub account to replace binaries in five versions of OVHcloud's command-line interface (CLI) with a secret-stealing binary. The compromised versions, v0.11.0 through v0.15.0, were available for approximately 94 minutes before being blocked after a customer reported the issue. The attack was linked to a compromised account that had been under the attacker's control since at least March 2026. The malicious binary was designed to retrieve secrets from the disk of affected systems, primarily targeting users on macOS, Linux x86_64/arm64, and Windows x86_64. OVHcloud has since released a clean version, v0.16.0, and enabled GitHub's release immutability feature to prevent future incidents. Users who installed the compromised versions are advised to change all secrets stored on their systems. The attack is believed to be associated with the GlassWorm malware campaign. 13 sources 62

Extracted Entities

International Cyber Digest on X: "‼️ BREAKING: OVHcloud's official CLI was hijacked in a ...

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)

Platforms (1)