On April 1, 2021, Codecov discovered unauthorized modifications to its Bash Uploader script, which allowed a threat actor to extract sensitive information from users' CI environments. The malicious changes targeted…
2 articles · Updated August 15, 2026
Recent Intelligence Reports
Codecov's postmortem— about.codecov.io · August 15, 2026