Back to blog
Case study
Case Study: The Codecov Bash Uploader Compromise
· 1 min read
publishing.
In 2021, attackers modified the widely-used Codecov Bash Uploader, a script countless CI pipelines curl | bash to upload coverage reports. The change was small and went undetected for months.