Glassworm Hacks OVH Clouds CLI tool

Attackers using a GitHub account hijacked from an OVHcloud contributor replaced the release binaries of five versions of OVHcloud’s official CLI tool with a secret-stealing build on October 19, OpenSourceMalware reports. The tampered files were available for about 94 minutes before a downstream user’s checksum check caught them, and OVHcloud deleted them and shipped a clean release.