Unverified50% confidenceCautionExact time
NPM's management interface should not be exposed to the public internet; otherwise, attackers may directly modify routing rules to bypass authentication.
1
Sources
50%
Confidence
Long-term
Relevance
8/7/2026
First Seen
Sources
端口转发下Authentik安全性解析：自托管服务防护指南
Related Claims
UnverifiedNPM's management backend uses port 81 by default and should not be exposed to the public internet.72% similarUnverifiednpm 依赖图是一个典型的无标度网络（scale-free network），符合幂律分布，对针对性攻击高连接度节点极为脆弱66% similarUnverifiedSandboxing the AI agent execution environment can restrict its access to local sensitive files and external networks, containing the attack's blast radius.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/703329API
curl https://kongchang.com/api/v1/knowledge/claims/703329MCP
get_claim(id=703329)