#incident
Wiki 2
- TanStack npm Supply Chain Compromise — Postmortem How three known vulnerabilities chained into 84 malicious @tanstack/* npm publishes, and what stops the same chain
- xz-utils Incident 2024 social-engineering supply-chain attack where a long-running fake-maintainer persona ("Jia Tan") inserted an SSH backdoor into xz/liblzma