Tag

codecov-supply-chain-attack

Safeguard articles tagged "codecov-supply-chain-attack" — guides, analysis, and best practices for software supply chain and application security.

1 article

The Codecov Bash uploader breach

How a Docker image flaw let attackers tamper with Codecov's Bash Uploader for 65 days, exfiltrating CI secrets from HashiCorp, Twilio, and more.