Software Supply Chain Attack
An attack method that compromises a target system indirectly by poisoning upstream components, tools, or services on which the target organization depends. Notable examples include the SolarWinds incident and npm dependency confusion attacks.
Core Facts
Timeline (last 90 days)
The impact of software supply chain attacks propagates along the dependency chain, affecting a large number of downstream projects.
A software supply chain attack refers to an attack method in which the attacker poisons upstream dependency components to infect downstream users en masse.
All Facts (2)
A software supply chain attack refers to an attack method in which the attacker poisons upstream dependency components to infect downstream users en masse.
80%UnverifiedThe impact of software supply chain attacks propagates along the dependency chain, affecting a large number of downstream projects.
50%