Observed incident

OVHcloud CLI release swap targets AI-agent data and credentials

Reported

Published here

What happened

Attackers replaced OVHcloud CLI release binaries with a stealer targeting AI-assistant databases, agent histories and local cloud/developer secrets.

Parties and reporting

AI tools and systems: OVHcloud CLI v0.11.0–v0.15.0 release binaries, Cursor, Continue, Sourcegraph Cody, OpenCode, Hermes, Claude

Outcome

OVHcloud removed the malicious downloads on October 19, released clean v0.16.0, suspended the developer account and enabled immutable releases. Exposed users must revoke or rotate secrets.

Operating lesson

Verify release provenance and isolate agent histories and credentials from general-purpose developer tools; replacing malware does not invalidate stolen secrets.

Evidence and limits

Confirmed release-asset compromise, not AI-driven execution. Exposure requires downloading an affected binary during October 19’s 12:47–14:21 UTC window and running it. Source code was unaffected. Downloads do not establish successful theft or victim count; user credential recovery remains separate from distribution containment.

Sources