Unverified50% confidenceFactExact time
Historically, well-known npm packages such as event-stream and ua-parser-js have been poisoned.
1
Sources
50%
Confidence
Long-term
Relevance
10/19/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedHistorically, npm packages such as event-stream and ua-parser-js have experienced supply chain security incidents.76% similarUnverifiedHistorically, the npm event-stream incident (2018) and the PyPI ctx poisoning incident (2022) both caused widespread supply chain attack impacts.71% similarUnverifiedThe event-stream malicious code injection incident planted theft code targeting a specific cryptocurrency wallet in a sub-dependency, and had been downloaded millions of times before it was discovered.64% similarUnverified2021年的ua-parser-js事件中，攻击者入侵单个被广泛使用的npm包，一次性影响了数以万计的下游项目63% similarVerifiedIn 2021, the ua-parser-js supply chain attack occurred, in which attackers compromised a maintainer's account to publish a malicious version.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1072667API
curl https://kongchang.com/api/v1/knowledge/claims/1072667MCP
get_claim(id=1072667)