Codecov 관련 사고

Codecov Bash Uploader Compromise (2021)

Threat actors modified Codecov's Bash Uploader to exfiltrate environment variables containing tokens, credentials, and keys from CI/CD pipelines across roughly 29,000 affected organizations.