Unverified50% confidenceEventExact time
During the left-pad incident of 2016, after an npm package of only 11 lines of code was deleted by its author, tens of thousands of CI/CD pipelines around the world simultaneously attempted to reinstall dependencies, placing enormous pressure on the npm registry.
1
Sources
50%
Confidence
Long-term
Relevance
8/9/2026
First Seen
Sources
OpenAI意外DDoS攻击Hugging Face事件复盘与启示
Related Claims
Unverified2016年left-pad事件中，一个仅11行代码的npm包导致互联网局部瘫痪65% similarPartially VerifiedIn the 2020 SolarWinds incident, attackers infiltrated a software vendor's CI/CD build pipeline to inject malicious code, and approximately 18,000 customers installed update packages containing backdoors58% similarUnverifiedThe leaked 510,000 lines of code were downloaded, archived, and publicly analyzed by multiple developers before being deleted.56% similarUnverifiedIn 2018, the npm ecosystem saw the event-stream incident, in which a widely depended-upon open-source package had cryptocurrency wallet-stealing code injected by a malicious maintainer, affecting millions of downloads.54% similarUnverifiedIn 2022, the node-ipc malicious code incident occurred, in which a well-known open-source package was implanted with destructive code53% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/720683API
curl https://kongchang.com/api/v1/knowledge/claims/720683MCP
get_claim(id=720683)