event-stream
A well-known supply-chain security incident in the npm ecosystem in 2018, in which a malicious maintainer injected code to steal cryptocurrency.
Timeline (last 90 days)
Historically, well-known npm packages such as event-stream and ua-parser-js have been poisoned.
The event-stream malicious code injection incident planted theft code targeting a specific cryptocurrency wallet in a sub-dependency, and had been downloaded millions of times before it was discovered.
Historically, npm packages such as event-stream and ua-parser-js have experienced supply chain security incidents.
The event-stream incident in 2020 and the node-ipc incident in 2022 both demonstrated the destructive power of software supply chain poisoning.
Historically, the npm event-stream incident (2018) and the PyPI ctx poisoning incident (2022) both caused widespread supply chain attack impacts.
All Facts (5)
Historically, well-known npm packages such as event-stream and ua-parser-js have been poisoned.
50%UnverifiedHistorically, npm packages such as event-stream and ua-parser-js have experienced supply chain security incidents.
50%UnverifiedThe event-stream incident in 2020 and the node-ipc incident in 2022 both demonstrated the destructive power of software supply chain poisoning.
50%UnverifiedHistorically, the npm event-stream incident (2018) and the PyPI ctx poisoning incident (2022) both caused widespread supply chain attack impacts.
50%UnverifiedThe event-stream malicious code injection incident planted theft code targeting a specific cryptocurrency wallet in a sub-dependency, and had been downloaded millions of times before it was discovered.
50%