The OVHcloud's breach was from compromising a developer's GitHub login and swapped the binaries on shelves that were never sealed. https://www.securityweek.com/hijacked-developer-account-used-to-plant-stealer-in-ovhcloud-cli/