OVHcloud CLI Tool Compromised to Distribute Malware

OVHcloud, a French cloud and hosting provider, has issued a warning regarding the compromise of its open-source command-line interface (CLI) tool, which was modified to distribute information-stealing malware.

Attackers gained access to the OVHcloud CLI repository by hijacking a developer’s GitHub account, allowing them to alter versions 0.11.0 through 0.15.0 of the tool.

The OVHcloud CLI tool is designed for system administrators and developers to manage cloud and hosting services directly from a terminal, facilitating task automation.

In a statement, OVHcloud CEO Octave Klaba revealed that the compromised repository was detected after a customer reported the issue. The malicious release was identified at 14:47 on October 19 and was blocked by 16:21.

Klaba specified that the affected versions are v0.11.0, v0.12.0, v0.13.0, v0.14.0, and v0.15.0, while version 0.10.0 and the latest release, 0.16.0, remain unaffected.

Although the malware’s quality was deemed poor, its function was to retrieve sensitive information from the disk, according to Klaba.

He further explained that the attack exploited a disabled release immutability setting on GitHub, which allowed a privileged account to modify existing releases without undergoing CI/CD checks. However, he confirmed that the CI/CD pipelines, including unit tests and functional tests, were not compromised.

Following the incident, OVHcloud has re-enabled GitHub’s release immutability feature and considers the situation resolved. Nevertheless, Klaba urged users who downloaded the compromised CLI package to clean their systems and revoke all secrets.

He warned, “The quality of the binary is poor but it can go all the way. If you are affected, please change all the secrets on your disk.”

Connection to GlassWorm Operation

According to OpenSourceMalware, a community-driven threat intelligence platform, this attack is likely linked to a new GlassWorm operation, which has been active since late 2025 and has previously targeted various software development ecosystems, including VSCode and npm.

Researchers confirmed that the attacker did not tamper with the CI/CD pipelines and instead uploaded malware-infected packages built locally.

OpenSourceMalware’s analysis indicates that the GitHub account involved in the attack had been compromised for over six months. They noted a scripted history rewrite on March 5, 2026, and a hidden preinstall.js loader that decodes to a second stage using a Solana memo dead drop.

While the associated wallet is a known indicator of GlassWorm activity, the researchers did not analyze the malicious payload delivered through the compromised OVHcloud CLI.

The report states that affected platforms include macOS (Intel and ARM), Linux (x86_64 and ARM64), and Windows x86-64, while source builds and Docker images were not impacted.

Anyone who executed an affected binary should treat all secrets on their machine as compromised.

Source: BleepingComputer