Learn
LoginRegister

Foundation glossary/AppSec

Supply Chain Risk

Companion card for the Foundation course — study the related lesson for full progress.

Foundation courseRelated lesson →

Simple explanation

Risk from code and vendors you did not write.

Technical explanation

Dependencies, build systems, hardware, third parties.

Real-life scenario

Random ‘mod APK’ or shady Chrome extension in your browser.

Security relevance

Attackers hit dependencies and installers you trust by default.

Practical example

Malicious npm package in CI.

Supply Chain Risk diagram
Supply chain — trust flows downhill.

Mini quiz

A malicious npm package in CI is mainly:

Related lesson

Continue in the Foundation course: open lesson →