Supply Chain Attack
A cybersecurity attack method in which adversaries compromise upstream software dependencies—such as open-source packages or build tools—to achieve large-scale infiltration by exploiting trust relationships. Notable examples include the SolarWinds incident and npm package poisoning events.
Core Facts
GPG signing is a digital signature mechanism based on asymmetric encryption; in GitHub's release workflow, maintainers use a private key to sign release artifacts, and users can verify the signature's validity using a public key.
Backdoor code was planted in the 2020 SolarWinds supply chain attack.
A software supply chain attack refers to an attack method in which the attacker poisons upstream dependency components to infect downstream users en masse.
Timeline (last 90 days)
Common entry points for supply chain attacks include third-party component vulnerabilities, software update channels and shared credentials.
Defending against supply chain attacks requires vendor security assessments, the principle of least privilege and continuous monitoring; perimeter protection alone is difficult to make effective.
The real signal is "supply chain" rather than "single point", as attackers' focus shifts upstream in the trust chain.
The security review before skill installation corresponds to the supply chain attack risk in the AI agent field: skills can contain scripts, network requests, and file operation instructions, and malicious skills may steal data or execute destructive commands; common industry protections include static scanning, declarative permissions, and runtime human confirmation.
Typical supply chain attack methods include soldering an extra tiny chip onto the printed circuit board, tampering with the firmware flashing process, or swapping the device during the logistics stage.
Motives for attacks on cold chain equipment may include extortion, sabotage and showing off, as well as reconnaissance for a supply chain attack.
If signature verification is bypassed, the private key is leaked, or the update server and download channel are hijacked, an attacker can push arbitrary code to users' machines.
供应链攻击指攻击者不直接瞄准最终目标，而是入侵其信任的第三方供应商、服务商或软件更新渠道，借助信任关系渗透进目标网络。
缓解供应链攻击的措施包括：要求供应商提供安全审计报告、在合同中明确安全责任、对远程管理接口实施多因素认证与访问控制。
A supply chain attack refers to an attack in which the attacker does not directly compromise the target system, but instead achieves the attack indirectly by contaminating upstream software, tools, or services that the target depends on.
21 more timeline events
All Facts (20)
GPG signing is a digital signature mechanism based on asymmetric encryption; in GitHub's release workflow, maintainers use a private key to sign release artifacts, and users can verify the signature's validity using a public key.
90%VerifiedBackdoor code was planted in the 2020 SolarWinds supply chain attack.
85%VerifiedA software supply chain attack refers to an attack method in which the attacker poisons upstream dependency components to infect downstream users en masse.
80%VerifiedCommon techniques in NPM supply chain attacks include typosquatting, hijacking abandoned legitimate packages, and phishing to obtain maintainer account credentials before injecting malicious versions.
65%VerifiedThe logic of a supply chain attack is that the attacker only needs to compromise one widely depended-upon link to reach multiple high-value targets.
65%VerifiedThe over-concentration of model distribution and version management in the AI ecosystem on a small number of platforms amplifies the risks of single points of failure and supply chain attacks.
65%VerifiedThe ua-parser-js supply chain attack occurred in 2021.
90%Partially VerifiedA supply chain attack refers to an attack in which the attacker does not directly compromise the target system, but instead achieves the attack indirectly by contaminating upstream software, tools, or services that the target depends on.
65%UnverifiedDefending against supply chain attacks requires vendor security assessments, the principle of least privilege and continuous monitoring; perimeter protection alone is difficult to make effective.
50%UnverifiedCommon entry points for supply chain attacks include third-party component vulnerabilities, software update channels and shared credentials.
50%UnverifiedThe real signal is "supply chain" rather than "single point", as attackers' focus shifts upstream in the trust chain.
50%UnverifiedThe security review before skill installation corresponds to the supply chain attack risk in the AI agent field: skills can contain scripts, network requests, and file operation instructions, and malicious skills may steal data or execute destructive commands; common industry protections include static scanning, declarative permissions, and runtime human confirmation.
50%UnverifiedTypical supply chain attack methods include soldering an extra tiny chip onto the printed circuit board, tampering with the firmware flashing process, or swapping the device during the logistics stage.
50%UnverifiedIf signature verification is bypassed, the private key is leaked, or the update server and download channel are hijacked, an attacker can push arbitrary code to users' machines.
50%Unverified缓解供应链攻击的措施包括：要求供应商提供安全审计报告、在合同中明确安全责任、对远程管理接口实施多因素认证与访问控制。
50%Unverified供应链攻击指攻击者不直接瞄准最终目标，而是入侵其信任的第三方供应商、服务商或软件更新渠道，借助信任关系渗透进目标网络。
50%UnverifiedSupply chain attacks targeting hardware wallets are generally divided into two categories: physical-layer tampering and firmware-layer tampering.
50%UnverifiedSupply chain attacks can implant backdoors at the hardware or firmware level, bypassing the wallet's own cryptographic protections to steal private keys or mnemonic phrases from the physical source.
50%UnverifiedTypical supply chain attack vectors targeting model repositories include embedding executable malicious code in pickle-format model weight files, replacing datasets for data poisoning, and modifying model card code examples to plant backdoors.
50%UnverifiedThird-party Skill code of unknown origin may contain malicious logic, which constitutes a supply chain attack risk within the field of software supply chain security.
50%