Executive Summary
Five OVHcloud CLI release archives were replaced with secret-stealing malware through a hijacked contributor account. Organizations using the affected command-line tool, particularly those operating AI infrastructure or agents, should assess artifact integrity and potential credential exposure.
What Happened
An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider says. They were live on GitHub for up to 94 minutes, from 12:47 to 14:21 UTC,
Affected Products
- OVHcloud command-line tool
Vulnerability / Attack Technique
Compromised contributor account and malicious release artifact replacement
Technical Mechanism
The attacker used a contributor's hijacked GitHub account to replace download archives on five existing releases of the OVHcloud command-line tool. The replacement files were builds designed to steal secrets stored on the disk of any machine that ran them, and they remained available for up to 94 minutes.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
AI agents and LLM applications frequently depend on command-line tools, developer environments, cloud credentials, and automation pipelines, so a compromised release artifact could expose secrets used by those systems. Teams should treat third-party AI infrastructure dependencies as part of the agent and LLM supply chain and verify artifact provenance before deployment.
Recommended Controls
- Pin CLI dependencies to verified versions and validate release checksums or cryptographic signatures before execution.
- Use an SBOM and dependency inventory covering AI agents, LLM applications, cloud tooling, and build pipelines.
- Restrict secrets available to developer workstations, CI runners, and agent execution environments using least privilege.
- Monitor GitHub releases and package sources for unexpected artifact changes, contributor-account compromise, and anomalous downloads.
- Rotate credentials and investigate affected hosts if a potentially compromised release was executed.
Related RealGround Service
AI Security Readiness Assessment · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/10/hackers-hijack-five-ovhcloud-cli.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-20.