4 ms·
I wish they'd release the code that was modified so a threat assessment can be made
by hparadiz 6y ago
I wish they'd release the code that was modified so a threat assessment can be made
- marcinzm 6y agoI'm curious if they even know right now or if the code was being injected dynamically somehow. The post is sparse on the details.
- xmodem 6y agoUnfortunately archive.org last fetched the script in November last year: https://web.archive.org/web/2020*/https://codecov.io/bash https://web.archive.org/web/2020*/https://codecov.io/bash A quick diff against the current version doesn't show anything suspicios
- davidrans 6y agoHere it is; see line 525: https://gist.github.com/davidrans/ca6e9ffa5865983d9f6aa00b7a4a1d10 https://gist.github.com/davidrans/ca6e9ffa5865983d9f6aa00b7a...
- Jlleitschuh 6y agoCurious how you found that. Great find though. This is the exact line: https://gist.github.com/davidrans/ca6e9ffa5865983d9f6aa00b7a4a1d10#file-bash-compromised-L525 https://gist.github.com/davidrans/ca6e9ffa5865983d9f6aa00b7a...
- davidrans 6y agohttps://news.ycombinator.com/item?id=26825432 https://news.ycombinator.com/item?id=26825432