Software supply chain compromise
Named by 4 kept items in this workspace.
Search every workspace for Software supply chain compromise. It matches the name as written, so it can find other things that share it.
The items that name it 4
SolarWinds (December 2020) and Log4j zero-day (December 2021) events hit during holiday code freezes
UNC6780 poisoned PyPI, npm and Docker Hub packages to deploy credential stealers; a malicious AI-suggested dependency and packages installing LLM proxy services were also seen
Compromise of both the published crates.io package and the upstream GitHub source repository, so switching source does not avoid the malicious code
All techniques in this workspace.