GSD-2021-1000009

In Codecov Codecov Bash uploader version All versions downloaded from Jan 2021 through April 2021. Because the attacker had control of the script the version # included in it cannot be trusted. a Replacement of bash script by an attacker to one that includes malicious commands exists in the The Bash uploader script that can be attacked via Numerous victims downloaded and executed this script, resulting in Information disclosure is known, other impacts may have occurred (it is not clear if the script was only replaced once or multiple times)