Tech

Backdoored developer tool that stole credentials escaped notice for 3 months

Enlarge (credit: Getty Images) A publicly available software development tool contained malicious code that stole the authentication credentials that apps need to access sensitive resources, in the latest revelation of a supply chain attack that has the potential to backdoor the networks of countless organizations. The Codecov Bash Uploader contained the backdoor from late January […]