Unverified50% confidenceFactExact time
Supply chain attacks plant malicious code indirectly by contaminating third-party libraries that a project depends on, rather than directly breaching the target project
1
Sources
50%
Confidence
Long-term
Relevance
9/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedDependency confusion attacks exploit the characteristic of package managers to check public sources first when resolving dependencies, allowing attackers to register package names used internally by enterprises in order to trick build systems into downloading malicious code.72% similarUnverified恶意开发者的供应链攻击包括域名近似劫持、工具名称冲突、偏好诱导攻击、工具投毒、跑路服务、跨服务器影子劫持、命令注入等69% similarUnverifiedThe event-stream malicious package incident in the npm ecosystem demonstrated the destructive power of dependency chain poisoning, where an attacker took over a small library and injected malicious code into downstream projects.69% similarUnverified供应链攻击的危险性在于攻击的传播效应，被篡改的上游组件可能影响所有依赖它的下游系统69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/898432API
curl https://kongchang.com/api/v1/knowledge/claims/898432MCP
get_claim(id=898432)