Unverified50% confidenceEventExact time
In the ctx package incident of 2022, an attacker hijacked a package with millions of downloads and stole sensitive information such as AWS keys.
1
Sources
50%
Confidence
Long-term
Relevance
9/8/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedIn the 2018 event-stream incident, an attacker took over the maintenance rights of an npm package and implanted malicious code to steal Bitcoin wallet private keys; the package had over 2 million weekly downloads.77% similarUnverifiedIn the 2021 ua-parser-js poisoning incident, an attacker hijacked the package maintainer's account and injected a mining program and a password stealer into three versions; affected downstream projects included internal tools of major tech companies such as Facebook and Microsoft.76% similarUnverified2016年针对德国联邦议院的网络攻击中，攻击者在系统内潜伏长达数月，窃取了约16GB的敏感数据72% similarUnverified2013年Target百货数据泄露事件中，攻击者通过一家暖通空调供应商的网络凭证渗透进入支付系统，导致4000万张信用卡信息被盗72% similarUnverifiedIn 2023, Razer suffered a data breach in which the account information of tens of thousands of users was exposed.71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/877219API
curl https://kongchang.com/api/v1/knowledge/claims/877219MCP
get_claim(id=877219)