Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI

A developer account was compromised in March and used to distribute a credential-stealing malware via the OVHcloud CLI, linked to a GlassWorm-associated loader. The attack targets software supply chain integrity, with the full scope of affected users still unclear. This highlights persistent risks in open-source and developer tooling distribution channels.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works