Unverified50% confidenceEventExact time
Open-source supply chain security incidents in recent years include malicious package poisoning in the npm ecosystem, phishing attacks on PyPI, and the XZ Utils backdoor incident.
1
Sources
50%
Confidence
Long-term
Relevance
9/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedHistorically, the npm event-stream incident (2018) and the PyPI ctx poisoning incident (2022) both caused widespread supply chain attack impacts.77% similarUnverified供应链攻击的危险性在于攻击的传播效应，被篡改的上游组件可能影响所有依赖它的下游系统68% similarUnverifiedThe event-stream malicious package incident in the npm ecosystem demonstrated the destructive power of dependency chain poisoning, where an attacker took over a small library and injected malicious code into downstream projects.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/913689API
curl https://kongchang.com/api/v1/knowledge/claims/913689MCP
get_claim(id=913689)