A Cloud CLI Became a Secret Hunter. The Weak Link Wasn’t the Build Pipeline
A compromised GitHub account slipped information-stealing malware into OVHcloud’s command-line tool—showing how a trusted download can bypass even carefully tested software pipelines.
Read the story →