Unverified50% confidenceFactExact time
来路不明的封装安装包引发的安全威胁属于软件供应链攻击，2020年的SolarWinds事件即为典型案例
1
Sources
50%
Confidence
Long-term
Relevance
7/18/2026
First Seen
Sources
Related Claims
UnverifiedThe 2020 SolarWinds incident and the 2021 Codecov incident are classic examples of supply chain attacks, in which attackers infected users at scale by compromising software distribution channels.77% similarVerified2020年SolarWinds事件中，攻击者通过污染软件构建流程将后门植入正版软件更新包，渗透美国多个政府机构73% similarVerifiedThe 2021 SolarWinds incident and the Log4j vulnerability made the industry realize that widely trusted tools could also become attack entry points.72% similarUnverified供应链安全在 SolarWinds、Codecov 等事件之后受到广泛关注，CI/CD 环境成为攻击者污染构建流程的重点防护对象69% similarUnverified2020 年的 SolarWinds 攻击中，攻击者在构建流水线层面植入恶意代码，代码仓库哈希链并未被触动，攻击绕过了版本控制层69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/556032API
curl https://kongchang.com/api/v1/knowledge/claims/556032MCP
get_claim(id=556032)