HIGH8.8npm
GHSA-5q88-cjfq-g2mh· CVE-2020-7597, SNYK-JS-CODECOV-548879codecov NPM module allows remote attackers to execute arbitrary commands
Modified: 7/8/2026
package
pkg:npm/codecov
codecov NPM module allows remote attackers to execute arbitrary commands
Modified: 7/8/2026
Improper Neutralization of Special Elements in Output Used by a Downstream Component in Codecov
Modified: 3/16/2026
Command injection in codecov (npm package)
Modified: 2/4/2026