Unverified50% confidenceEventExact time
2022年Codecov事件中攻击者通过篡改Codecov的构建脚本，导致数千家企业CI环境中的环境变量被静默上传至攻击者
1
Sources
50%
Confidence
Long-term
Relevance
7/6/2026
First Seen
Sources
Related Claims
UnverifiedThe Codecov incident occurred in 2021, when attackers tampered with CI tool scripts to steal enterprise environment variables and keys at scale.84% similarUnverifiedSolarWinds 事件中攻击者在构建流程植入后门代码影响数千家企业和政府机构，Codecov 事件中攻击者篡改 CI 上传脚本窃取客户环境变量和令牌71% similarUnverifiedThe 2020 SolarWinds incident and the 2021 Codecov incident are classic examples of supply chain attacks, in which attackers infected users at scale by compromising software distribution channels.70% similarUnverified2020 年 SolarWinds 攻击中攻击者在构建流水线植入恶意代码，代码仓库哈希链未被触动；2021 年 Codecov 事件通过篡改 CI 上传脚本窃取凭证，未涉及 Git 历史重写68% similarUnverified2023年CircleCI数据泄露事件中，攻击者通过员工开发机上的凭证文件实现供应链级别的渗透，波及数千家企业67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/113788API
curl https://kongchang.com/api/v1/knowledge/claims/113788MCP
get_claim(id=113788)