domains / families / security / performing-supply-chain-attack-simulation

performing-supply-chain-attack-simulation

separate

Simulates and detects software supply chain attacks: typosquatting detection via Levenshtein distance against popular PyPI package names, dependency confusion testing against private registries, SHA-256 package hash verification, and known-CVE scanning with pip-audit. Use when auditing a project's dependencies for malicious or confused packages, or when assessing package-registry supply-chain risk.

When to use

• When conducting security assessments that involve performing supply chain attack simulation
• When following incident response procedures for related security events
• When performing scheduled security testing or auditing activities
• When validating security controls through hands-on testing

Skill page

Source