OVHcloud GitHub Account Breach Linked to GlassWorm Threat Actors

Dark Reading reports that a GitHub account belonging to a developer was compromised several months before it was used to distribute malicious code. The incident has been tied to the GlassWorm threat actors and is linked to OVHcloud.

The account was used to push malicious code to users who had no reason to suspect anything was wrong. Because the code appeared to come from a trusted developer account, people who downloaded or updated it may have trusted it without question.

The feed summary does not give further detail on how the account was first compromised, what the malicious code did, or how many users were affected. Businesses that rely on code from public repositories should treat this as a reminder that a trusted source can be abused when an individual account is taken over and left unnoticed for a long time.