Corpus graph previewActor to Incident
Supply Chain GraphPan, zoom, and select actor, campaign, and incident tiers.

Supply Chain graph is loading. Keyboard controls become available after graph initialization.

Supply Chain Incident

Focused Graph View

The persistent graph is framed to this incident while the canonical page heading and details continue below.

270 nodes467 edgesCold links hydrate here

Supply Chain Incident

Codecov Bash Uploader credential exfiltration

The Codecov Bash Uploader was modified by an attacker, enabling environment variable and credential exfiltration from affected CI environments.

ConfidenceHigh
Evidence LevelVendor
Attack StageCi Cd Compromise
Source Artifact DivergenceYes

Affected Packages

No structured records.

Affected Releases

No structured records.

Repositories

Organizations

Maintainers

No structured records.

Threat Actors

No structured records.

Campaigns

No structured records.

Build Systems

  • Codecov Bash Uploader distribution pipeline

Distribution Channels

  • Codecov Bash Uploader download path

Compromised Accounts

No structured records.

Connected Entities

  • CodecovOrganization
  • Codecov Bash Uploader distribution pipelineBuild System
  • Codecov Bash Uploader download pathDistribution Channel
  • codecov/codecov-bashRepository

References