Skip to content
← LibraryTechnique entry
APT-CI-BASH-UPLOADInitial Access

CI Uploader Backdoor (Codecov)

Compromise a script that thousands of CI pipelines `curl | bash` — exfil environment + secrets from every running build for months.

§ Where this technique fits

APT-CI-BASH-UPLOAD is catalogued under the Initial Access tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.