compromising a package manager to distribute a bad package worldwide

mechanism stub

This concept is still a stub — no write-up yet. The links below already make it part of the graph.

Examples & generalisations

An example of: Software Supply Chain Attack