Glossary: Threat Vectors: Files, Networks and Endpoints

npm and PyPI

Also written: npm, PyPI, public repositories

Public repositories of software packages. Malicious packages there are a supply chain vector.

Where the book teaches it

Chapter 5: Supply Chains and USB

Related terms

supply chain-based vector SBOM (software bill of materials)XZ Utils (CVE-2024-3094)