Unverified50% confidenceFactExact time
Dependency poisoning attackers can upload malicious packages with the same name as private packages but with higher version numbers to public package registries, luring build systems into automatically pulling them.
1
Sources
50%
Confidence
Long-term
Relevance
9/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedDependency confusion attacks exploit the characteristic of package managers to check public sources first when resolving dependencies, allowing attackers to register package names used internally by enterprises in order to trick build systems into downloading malicious code.78% similarUnverified数据投毒攻击中，清洁标签攻击允许攻击者在不修改样本标签的情况下植入后门，特洛伊木马攻击通过特定触发词激活预设的恶意行为70% similarUnverifiedAttackers can induce agents to execute a sequence of seemingly normal operations—such as querying user data, calling formatting tools, and triggering email sending—to form a data exfiltration chain.69% similarUnverified攻击者常借助混淆技术隐藏恶意脚本诱导用户复制粘贴运行，这类手法被称为剪贴板劫持或社会工程学注入68% similarUnverified攻击者利用AI幻觉出的包名，提前在npm、PyPI等包注册表抢注并植入恶意代码，这种攻击手法被称为slopsquatting67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/901389API
curl https://kongchang.com/api/v1/knowledge/claims/901389MCP
get_claim(id=901389)