Partially Verified70% confidenceEventExact time
In the 2020 SolarWinds incident, attackers infiltrated a software vendor's CI/CD build pipeline to inject malicious code, and approximately 18,000 customers installed update packages containing backdoors
4
Sources
70%
Confidence
Long-term
Relevance
7/8/2026
First Seen
Sources
Alibaba Plans to Ban Claude Code: The Battle Between Backdoor Risks and Enterprise AI Security
hackernewshackernews7/3/2026
Related Claims
UnverifiedIn the 2020 SolarWinds incident, attackers injected malicious code into the build pipeline, ultimately affecting tens of thousands of downstream users.80% similarVerified2020年SolarWinds事件中，攻击者通过污染软件构建流程将后门植入正版软件更新包，渗透美国多个政府机构75% similarUnverified2020 年 SolarWinds 攻击中攻击者在构建流水线植入恶意代码，代码仓库哈希链未被触动；2021 年 Codecov 事件通过篡改 CI 上传脚本窃取凭证，未涉及 Git 历史重写69% similarUnverifiedSolarWinds 事件中攻击者在构建流程植入后门代码影响数千家企业和政府机构，Codecov 事件中攻击者篡改 CI 上传脚本窃取客户环境变量和令牌69% similarUnverified2020 年的 SolarWinds 攻击中，攻击者在构建流水线层面植入恶意代码，代码仓库哈希链并未被触动，攻击绕过了版本控制层68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/263185API
curl https://kongchang.com/api/v1/knowledge/claims/263185MCP
get_claim(id=263185)