Unverified50% confidenceFactExact time
The event-stream incident in 2020 and the node-ipc incident in 2022 both demonstrated the destructive power of software supply chain poisoning.
1
Sources
50%
Confidence
Long-term
Relevance
10/1/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedThe ua-parser-js supply chain attack occurred in 2021.72% similarUnverified2021年发生 PyPI 投毒事件，2022年发生多起 npm 恶意包事件，造成真实损失69% similarVerified2024年发生了XZ Utils后门事件，险些酿成重大供应链攻击64% similarUnverifiedThe SolarWinds incident in 2021 and the Log4j vulnerability incident in 2022 made the industry aware of the severity of supply chain risks63% similarUnverifiednpm 的 event-stream 事件发生于2018年，ua-parser-js 事件发生于2021年63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/964168API
curl https://kongchang.com/api/v1/knowledge/claims/964168MCP
get_claim(id=964168)