Unverified50% confidenceFactExact time
npm、Syft、cdxgen等工具可以自动从Node.js项目生成SBOM文件
1
Sources
50%
Confidence
Long-term
Relevance
7/13/2026
First Seen
Sources
jscrambler npm Package Compromised: Supply Chain Attack Incident Response and Protection Guide
redditr/programming7/11/2026
Related Claims
Verifiednpm (Node Package Manager) is the package manager that comes with Node.js, used to download and manage third-party code libraries required by a project.72% similarPartially VerifiedInstalling Node.js automatically includes npm (Node Package Manager)70% similarVerifiednpx是npm 5.2+内置的包执行工具，允许开发者无需全局安装即可直接运行任意npm包68% similarUnverifiedThe project plans to be uploaded to the NPM repository to enable one-click installation.66% similarUnverifiedNPX is described as a Node.js package executor, UVX as a Python package management tool, and BUNX as a Bun runtime.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/500927API
curl https://kongchang.com/api/v1/knowledge/claims/500927MCP
get_claim(id=500927)