Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI

A developer account was compromised in March and used to distribute a credential-stealing malware via the OVHcloud CLI, linked to a GlassWorm-associated loader. The attack targets software supply chain integrity, with the full scope of affected users still unclear. This highlights persistent risks in open-source and developer tooling distribution channels.