DevThe New Stackabout 3 hours ago
Codecov attack: pipeline breach exposed secrets for 61 days
11 min read
An attacker added one line of code to a popular bash script in January 2021. Tens of thousands of organizations ran the script in their CI pipelines, shipping environment variables to an unfamiliar IP for 61 days before detection. The XZ Utils backdoor of 2024 was caught by accident.
Level
Hype check
Tap to vote and see what everyone thinks.
