OVHcloud CLI backdoored on GitHub to steal developer secrets

Attackers compromised OVHcloud's open-source CLI tool on GitHub, embedding information-stealing malware to harvest developer credentials and secrets. The incident is confirmed by OVHcloud, but the scope of affected users and the exact method of compromise remain unclear. This matters because supply-chain attacks on developer tools can lead to widespread credential theft and downstream compromises.