/incidentsfield log

// platform

Codecov incidents

Indexed Non-Human Identity credential leak incidents that affected Codecov. Sorted by disclosure date.

1 incident indexed

2021-04-15·CRITICAL9.2·confirmed
Codecov Bash Uploader Compromise (2021)
Threat actors modified Codecov's Bash Uploader to exfiltrate environment variables containing tokens, credentials, and keys from CI/CD pipelines across roughly 29,000 affected organizations.
vector / CI/CD compromiseplatforms / Codecov, GitHub, GitLab, +1read / 4 min