Number of attacks on open source software supply chain 2019-2023

Statista2026-04-25 收录

供应链安全

攻击事件统计

数据链接：

https://www.statista.com/statistics/1268934/worldwide-open-source-supply-chain-attacks/数据链接链接失效反馈

官方服务：

资源简介：

Number of supply chain attacks on open source software (OSS) from 2019 to 2023

Lifecycle-Based VEX Risk Dataset for Software Supply Chain Governance

供应链安全

漏洞利用性治理

This dataset provides structured risk metadata derived from lifecycle-based analysis of Vulnerability Exploitability eXchange (VEX) statements. It is designed to support governance, auditing, and rese

Zenodo2026-04-07 更新80

Comparative Analysis of Release Speed with Outdated Time and CVE Incidence in the Maven Ecosystem

供应链安全

依赖漏洞管理

This dataset contains Maven Central dependency graph information (Artifacts, Nodes, Dependency, and dependency-Release).Correction Notice (v2): This version addresses inconsistencies in the initial ve

Figshare2024-12-06 更新30

Malicious NPM Package Detection Dataset

供应链安全

恶意软件检测

This dataset contains extracted JavaScript source files from malicious and benign NPM packages collected for cybersecurity research and machine learning based malware detection experiments. The datase

Figshare2026-03-03 更新20

面向开源包管理生态的高危软件供应链投毒风险数据集

供应链安全

开源包投毒检测

本数据集专门针对软件供应与分发环节中的恶意安全事件建设，旨在通过记录恶意包注入、依赖劫持及后门代码植入等典型投毒场景，提升对开源生态供应链风险的预警与感知能力。该资源基于对OSSFP等公开披露平台的持续监测，并深度融合了来自PyPI、npmjs、RubyGems及libraries.io等主流包管理平台的元数据。在产生过程中，采用自动化采集与人工复核相结合的机制确保事件基础信息的真实性与完整性，并

国家基础学科公共科学数据中心50

經濟部工業局_安全供應鏈推動計畫

供应链安全

工业政策实施

計畫執行 ,成果摘要 ,計畫執行報告

政府资料开放平台2026-04-01 更新30