Codecov Bash Uploader Dev Tool Compromised in Supply Chain Hack
Security response professionals are scrambling to measure the fallout from a software supply chain compromise of Codecov Bash Uploader that went undetected since January and exposed sensitive secrets like tokens, keys and credentials from organizations around the world.
Read more: Codecov Bash Uploader Dev Tool Compromised in Supply Chain Hack
Story added 16. April 2021, content source with full text you can find at link above.