Unverified50% confidenceFactExact time
npm 依赖图是一个典型的无标度网络（scale-free network），符合幂律分布，对针对性攻击高连接度节点极为脆弱
1
Sources
50%
Confidence
Long-term
Relevance
8/8/2026
First Seen
Sources
Related Claims
UnverifiedNPM's management interface should not be exposed to the public internet; otherwise, attackers may directly modify routing rules to bypass authentication.66% similarUnverifiedNginx Proxy Manager (NPM) is a graphical reverse proxy management tool based on Nginx that supports automatic application and renewal of Let's Encrypt certificates, with a default management backend port of 81.62% similarUnverifiedNPM's management backend uses port 81 by default and should not be exposed to the public internet.61% similarUnverifiedEnterprises typically set up internal NPM private registries (such as Verdaccio, Nexus, or cnpm), establish dependency whitelist mechanisms, and require all third-party packages to pass security scanning before use.60% similarUnverifiedA P2P network is a decentralized distributed architecture in which each node acts as both a resource consumer and a resource provider, without relying on a central server for coordination.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/705753API
curl https://kongchang.com/api/v1/knowledge/claims/705753MCP
get_claim(id=705753)