Verified90% confidenceEventExact time
In the 2020 SolarWinds incident, attackers planted a backdoor into legitimate software update packages by contaminating the software build process, infiltrating multiple U.S. government agencies
14
Sources
90%
Confidence
Long-term
Relevance
7/6/2026
First Seen
Sources
Payload-Less Skills: The Hidden Supply Chain Threat Targeting LLM Agents
hackernewshackernews7/4/2026
Related Claims
UnverifiedThe 2020 SolarWinds supply chain attack was carried out by threat actors from Russia and infiltrated multiple federal agencies including the U.S. Department of the Treasury.77% similarPartially VerifiedIn the 2020 SolarWinds incident, attackers infiltrated a software vendor's CI/CD build pipeline to inject malicious code, and approximately 18,000 customers installed update packages containing backdoors75% similarUnverifiedIn the 2020 SolarWinds incident, attackers injected malicious code into the build pipeline, ultimately affecting tens of thousands of downstream users.75% similarUnverifiedSolarWinds 事件中攻击者在构建流程植入后门代码影响数千家企业和政府机构，Codecov 事件中攻击者篡改 CI 上传脚本窃取客户环境变量和令牌74% similarUnverified来路不明的封装安装包引发的安全威胁属于软件供应链攻击，2020年的SolarWinds事件即为典型案例73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/113892API
curl https://kongchang.com/api/v1/knowledge/claims/113892MCP
get_claim(id=113892)