Expired80% confidenceEventTime unknown
NPM packages related to TenStack were hit by a supply chain poisoning attack, affecting 42 projects.
1
Sources
80%
Confidence
Medium-term (~90 days)
Relevance
6/1/2026
First Seen
This claim has expired. It is kept for the record and no longer describes the current state.
Valid until: 8/30/2026(expired)
Sources
Related Entities
Related Claims
UnverifiedThe event-stream malicious package incident in the npm ecosystem demonstrated the destructive power of dependency chain poisoning, where an attacker took over a small library and injected malicious code into downstream projects.61% similarUnverified供应链攻击的危险性在于攻击的传播效应，被篡改的上游组件可能影响所有依赖它的下游系统60% similarUnverifiedThe 2020 SolarWinds incident and the 2021 Codecov incident are classic examples of supply chain attacks, in which attackers infected users at scale by compromising software distribution channels.60% similarUnverified2021年曝光的QNAP NAS勒索软件事件（eCh0raix/QNAPCrypt）中，攻击者利用暴露在公网的管理界面实施攻击，感染量超过数万台55% similarUnverifiedData poisoning attacks are categorized into types such as Clean-Label Attacks and Trojan Attacks.55% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/19147API
curl https://kongchang.com/api/v1/knowledge/claims/19147MCP
get_claim(id=19147)