Unverified50% confidenceFactExact time
Pin-swap is a supply chain attack technique targeting dependency-locking mechanisms that replaces artifact contents or tampers with hook commands while keeping the version number unchanged.
1
Sources
50%
Confidence
Long-term
Relevance
10/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedPinning the version can prevent malicious code planted by attackers in later versions from automatically entering the environment, making it one of the most direct and effective countermeasures against supply chain poisoning.73% similarUnverifiedControl flow hijacking is a core technique in binary exploitation, through which attackers can alter a program's normal execution path and execute arbitrary code.68% similarUnverifiedTypical supply chain attack vectors targeting model repositories include embedding executable malicious code in pickle-format model weight files, replacing datasets for data poisoning, and modifying model card code examples to plant backdoors.64% similarUnverifiedCommon techniques in NPM supply chain attacks include typosquatting, hijacking abandoned legitimate packages, and phishing to obtain maintainer account credentials before injecting malicious versions.62% similarUnverifiedCracked/modified versions of Cursor are fundamentally implemented by tampering with underlying code or via API relay, and carry risks of reduced functionality, delayed updates, and data leakage61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/996880API
curl https://kongchang.com/api/v1/knowledge/claims/996880MCP
get_claim(id=996880)