Unverified50% confidenceFactExact time
deps.dev, maintained by Google, and socket.dev provide package-level behavioral analysis reports and can flag packages containing network requests, file system access, or obfuscated code.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/21/2026
First Seen
Valid until: 12/20/2026
Sources
Related Entities
Related Claims
VerifiedWhen UDP is completely blocked by a firewall, Tailscale ensures connectivity through DERP (Designated Encrypted Relay for Packets) relay servers, and end-to-end encryption prevents the relay servers from decrypting data content.56% similarUnverified封装安装包常见的恶意植入手段包括键盘记录器、后台挖矿程序和凭证窃取模块（扫描浏览器Cookie、本地密码管理文件和SSH密钥）55% similarUnverifiedSecurity vendors perform large-scale correlation analysis using passive DNS data, certificate transparency logs, and threat intelligence sharing platforms (such as MISP) to identify abusive domains.55% similarUnverifiedIn the Linux kernel, each network socket is represented as a file descriptor; when a process forks a child process, the child inherits the parent's file descriptor table via a reference-counting mechanism, causing port leaks to survive across processes.54% similarUnverified恶意载荷运行后会收集环境变量、SSH 密钥、云凭证、Kubernetes 服务账户令牌及各类供应商 API Key54% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/939487API
curl https://kongchang.com/api/v1/knowledge/claims/939487MCP
get_claim(id=939487)