Threat actors known as GlassWorm exploited a developer account belonging to OVHcloud to inject malicious code into open-source projects, according to new findings.
A hijacked developer account was used to inject a credential-stealing binary into the official OVHcloud command-line interface tool between October 19 and early afternoon.