OVHcloud warns compromised CLI versions could steal local secrets
Founder and CEO Octave Klaba said an attacker used a developer's GitHub account to add a credential-stealing binary to OVHcloud CLI versions 0.11.0 through 0.15.0. He urged users to rotate secrets.
By Ryan Merket · Published
Primary source: X
Why it matters
The CLI can hold credentials with access to cloud infrastructure and deployment workflows. Klaba urged users of versions 0.11.0 through 0.15.0 to remove the binary and rotate secrets, but his warning does not identify which distribution channels carried it or whether any credentials were stolen.
Octave Klaba (@olesovhcom), OVHcloud's founder and CEO, warned users on October 19th that compromised versions of the company's command-line interface contained a binary designed to collect secrets from users' computers. Klaba said an attacker used a developer's GitHub account to add the binary. His post on X named versions 0.11.0 through 0.15.0 as compromised, and versions 0.10.0 and 0.16.0 as clean.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.