Unverified50% confidenceEventExact time

npm 的 event-stream 事件发生于2018年，ua-parser-js 事件发生于2021年

1

Sources

50%

Confidence

Long-term

Relevance

8/8/2026

First Seen

Sources

AI Company Uses Social Engineering to Attack Open Source Maintainers and Inject Malicious Code: A Supply Chain Security Wake-Up Call

Related Claims

UnverifiedIn 2021, the npm package ua-parser-js was hijacked72% similar UnverifiedThe ua-parser-js supply chain attack occurred in 2021.71% similar Unverifiednpm 在 2023 年引入了细粒度令牌和发布来源证明（provenance）64% similar Partially VerifiedLLM项目始于2023年4月62% similar UnverifiedDify是2023年兴起的开源LLMOps（大模型运维）平台60% similar

Cite This Claim

Stable URI

https://kongchang.com/claim/707565

API

curl https://kongchang.com/api/v1/knowledge/claims/707565

MCP

get_claim(id=707565)