Unverified50% confidenceFactExact time
Historically, the npm event-stream incident (2018) and the PyPI ctx poisoning incident (2022) both caused widespread supply chain attack impacts.
1
Sources
50%
Confidence
Long-term
Relevance
9/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedOpen-source supply chain security incidents in recent years include malicious package poisoning in the npm ecosystem, phishing attacks on PyPI, and the XZ Utils backdoor incident.77% similarUnverifiedThe 2020 SolarWinds incident and the 2021 Codecov incident are classic examples of supply chain attacks, in which attackers infected users at scale by compromising software distribution channels.68% similarUnverified供应链攻击的危险性在于攻击的传播效应，被篡改的上游组件可能影响所有依赖它的下游系统66% similarUnverified2021年的ua-parser-js事件中，攻击者入侵单个被广泛使用的npm包，一次性影响了数以万计的下游项目66% similarUnverifiedThe ua-parser-js incident of 2021 and the node-ipc incident of 2022 demonstrated that attackers can target the entire downstream ecosystem by tampering with dependency packages or injecting malicious dependencies.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/915791API
curl https://kongchang.com/api/v1/knowledge/claims/915791MCP
get_claim(id=915791)