Codecov Bash Uploader compromised

Re:Codecov Bash Uploader compromised by hparadiz on Thursday April 15, 2021 @09:23AM (#26820144)

I wish they'd release the code that was modified so a threat assessment can be made

[ Parent | on HN ]

Re:Codecov Bash Uploader compromised by davidrans on Thursday April 15, 2021 @04:05PM (#26825486)

[ Parent | on HN ]

Re:Codecov Bash Uploader compromised by Jlleitschuh on Thursday April 15, 2021 @05:07PM (#26826126)

Curious how you found that. Great find though. This is the exact line:

[ Parent | on HN ]

Re:Codecov Bash Uploader compromised by davidrans on Thursday April 15, 2021 @06:23PM (#26826906)

[ Parent | on HN ]

Re:Codecov Bash Uploader compromised by marcinzm on Thursday April 15, 2021 @09:32AM (#26820244)

I'm curious if they even know right now or if the code was being injected dynamically somehow. The post is sparse on the details.

[ Parent | on HN ]

Re:Codecov Bash Uploader compromised by xmodem on Thursday April 15, 2021 @03:07PM (#26824846)

Unfortunately archive.org last fetched the script in November last year: https://web.archive.org/web/2020*/https://codecov.io/bash

A quick diff against the current version doesn't show anything suspicios

[ Parent | on HN ]