Unverified50% confidenceEventExact time
In 2021, the SolarWinds incident and npm malicious package poisoning events made the industry aware that every step in the pipeline from source code to end users for build artifacts could be tampered with.
1
Sources
50%
Confidence
Long-term
Relevance
9/27/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedBackdoor code was planted in the 2020 SolarWinds supply chain attack.77% similarUnverified自2020年SolarWinds供应链攻击事件后，业界已普遍意识到开发工具是潜在的数据渗透入口77% similarUnverifiedThe SolarWinds incident in 2021 and the Log4j vulnerability incident in 2022 made the industry aware of the severity of supply chain risks75% similarUnverifiedIn 2021, popular npm packages such as ua-parser-js and colors were subjected to malicious code injection incidents.61% similarUnverified2021年发生 PyPI 投毒事件，2022年发生多起 npm 恶意包事件，造成真实损失59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/953244API
curl https://kongchang.com/api/v1/knowledge/claims/953244MCP
get_claim(id=953244)