OVHcloud CLI releases backdoored on GitHub to steal developer secrets

French cloud and hosting provider OVHcloud has issued a security warning after discovering that its open-source command-line interface (CLI) tool was compromised by attackers. The malicious actors managed to inject information-stealing malware into the official repository.

This supply chain attack targets developers who rely on the CLI tool for managing their cloud environments. Once executed, the malicious payload is designed to harvest developer secrets, sensitive credentials, and other valuable system data.

OVHcloud is urging all affected users to take immediate action and is working on remediating the compromised repositories. The company continues to investigate how the breach occurred and mitigate further risks.

Incidents like this highlight the ongoing vulnerability of open-source software supply chains. Trusting public code repositories without proper verification can lead to widespread security compromises for organizations globally.

For IT professionals and developers in Uzbekistan and the wider region, this serves as a critical reminder to audit open-source dependencies regularly. Supply chain attacks remain a sophisticated threat vector that requires constant vigilance.