By Juha Saarinen on Apr 20, 2021 12:14PM Scores of projects potentially affected by supply chain attack. A malicious alteration to a shell script lay undetected since January this year at software testing coverage report provider Codecov, sparking fears of another significant supply chain attack. Forensic analysis shows that an unknown threat actor exploited an error in Codecov's Docker container image creation process, and gained access to the credential that allowed the modification to the company's Bash Uploader script. Codecov said a Google Cloud ...