Unverified60% confidenceFactTime unknown
2024年发生了XZ Utils后门事件，险些酿成重大供应链攻击
2
Sources
60%
Confidence
Long-term
Relevance
5/31/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedXZ Utils 攻击者从 2022 年开始贡献代码，在 2024 年 2 月的 5.6.0 和 5.6.1 版本中植入后门71% similarUnverifiedA supply chain security incident that occurred during May 14–16, 2025 forced the AI industry into an engineering-level response.66% similarUnverifiedThe ua-parser-js supply chain attack occurred in 2021.66% similarUnverifiedIn the XZ Utils incident exposed in March 2024, the attacker participated in project maintenance for two years under the identity of Jia Tan and ultimately planted an SSH backdoor in the build script of version 5.6.060% similarVerifiedThe Log4Shell vulnerability incident occurred in 2021.59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/7370API
curl https://kongchang.com/api/v1/knowledge/claims/7370MCP
get_claim(id=7370)