Unverified50% confidenceFactExact time
SolarWinds, Log4Shell and the various malicious npm package incidents all belong to supply chain attacks.
1
Sources
50%
Confidence
Long-term
Relevance
10/30/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSoftware supply chain security has received widespread attention in recent years due to major incidents such as Log4Shell and SolarWinds.74% similarUnverified来路不明的封装安装包引发的安全威胁属于软件供应链攻击，2020年的SolarWinds事件即为典型案例72% similarVerifiedThe 2021 SolarWinds incident and the Log4j vulnerability made the industry realize that widely trusted tools could also become attack entry points.68% similarUnverified2020 年的 SolarWinds 攻击中，攻击者在构建流水线层面植入恶意代码，代码仓库哈希链并未被触动，攻击绕过了版本控制层65% similarUnverifiedSolarWinds 事件中攻击者在构建流程植入后门代码影响数千家企业和政府机构，Codecov 事件中攻击者篡改 CI 上传脚本窃取客户环境变量和令牌64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1117288API
curl https://kongchang.com/api/v1/knowledge/claims/1117288MCP
get_claim(id=1117288)