The US is investigating a hack at Codecov that could affect thousands of companies, including Proctor & Gamble and GoDaddy.