#codecov
1 case
Codecov Bash Uploader Compromise: 60 Days of Silent CI Credential TheftSupply Chain Attack
A credential left in a Docker image layer let an unidentified attacker rewrite Codecov's Bash Uploader and harvest every secret from its customers' CI environments for sixty days. No one was ever identified.
Supply Chain Attack