OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found

An attacker who had compromised an OVHcloud contributor's GitHub account swapped legitimate CLI release binaries with malicious ones containing a credential stealer, remaining undetected for 94 minutes and infecting roughly 250 users. The root cause is a combination of weak account security on a trusted contributor's identity and an absence of binary integrity verification in the release pipeline. This matters because developers and AI agents implicitly trust official release assets, making a tampered binary a high-yield, low-noise attack vector. The 94-minute detection gap demonstrates that without automated release integrity monitoring, supply chain substitutions can achieve significant reach before any alert fires.