Unverified50% confidenceFactExact time
Typosquatting is one of the most common techniques in supply chain attacks, where attackers register malicious packages with names extremely similar to popular packages to exploit developer typos and trigger malicious code.
1
Sources
50%
Confidence
Long-term
Relevance
9/14/2026
First Seen
Sources
Related Entities
Related Claims
Unverified恶意开发者的供应链攻击包括域名近似劫持、工具名称冲突、偏好诱导攻击、工具投毒、跑路服务、跨服务器影子劫持、命令注入等70% similarUnverifiedPyPI 历史上多次出现 typosquatting 攻击，恶意发布者注册与知名库名称相似的包名诱导开发者错误安装含恶意代码的包69% similarUnverifiedDependency confusion attacks exploit the characteristic of package managers to check public sources first when resolving dependencies, allowing attackers to register package names used internally by enterprises in order to trick build systems into downloading malicious code.66% similarVerifiedPrompt injection attacks induce AI agents to execute malicious operations by embedding text disguised as system instructions in code comments, documentation, web content, or even file names.66% similarUnverified攻击者常借助混淆技术隐藏恶意脚本诱导用户复制粘贴运行，这类手法被称为剪贴板劫持或社会工程学注入65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/920096API
curl https://kongchang.com/api/v1/knowledge/claims/920096MCP
get_claim(id=920096)