{
  "schema_version": "1.0",
  "slug": "security/module-path-confusion-supply-chain-attack",
  "source_path": "security/module-path-confusion-supply-chain-attack.md",
  "url": "https://finwiki.zksc.io/ja/security/module-path-confusion-supply-chain-attack/",
  "html_url": "https://finwiki.zksc.io/ja/security/module-path-confusion-supply-chain-attack/",
  "alternate_html_urls": {
    "ja": "https://finwiki.zksc.io/ja/security/module-path-confusion-supply-chain-attack/",
    "en": "https://finwiki.zksc.io/en/security/module-path-confusion-supply-chain-attack/"
  },
  "github_url": "https://github.com/jasonhnd/finwiki/blob/main/security/module-path-confusion-supply-chain-attack.md",
  "raw_markdown_url": "https://finwiki.zksc.io/security/module-path-confusion-supply-chain-attack.md",
  "domain": "security",
  "title": "Module path confusion + LICENSE strip = サプライチェーン攻撃の三連撃",
  "entry_type": "wiki_entry",
  "frontmatter": {
    "title": "Module path confusion + LICENSE strip = サプライチェーン攻撃の三連撃",
    "aliases": [],
    "domain": "security",
    "type": "wiki",
    "created": "2026-05-12",
    "last_updated": "2026-05-26",
    "last_tended": "2026-06-24",
    "review_by": "2026-09-22",
    "confidence": "likely",
    "tags": [
      "security/supply-chain",
      "security/dependency",
      "security/dd"
    ],
    "status": "active",
    "canonical_anchor": null,
    "related": [
      "[[security/fork-and-rebrand-5-layer-audit-framework]]",
      "[[security/forensic-identity-anchor-chain]]"
    ],
    "note": null,
    "sources": [
      "https://go.dev/ref/mod",
      "https://docs.npmjs.com/cli/v10/configuring-npm/package-json",
      "https://securityscorecards.dev/"
    ]
  },
  "summary": "This entry sits under FinWiki index. Read it with fork-and-rebrand audit framework for peer context and systems index for the broader dependency boundary.",
  "headings": [
    "Module path confusion + LICENSE strip = サプライチェーン攻撃の三連撃",
    "Wiki route",
    "1. Module path confusion",
    "2. Replace hijack",
    "3. LICENSE strip",
    "識別 checklist",
    "When to Use",
    "When NOT to Use",
    "Provenance"
  ],
  "body_links": {
    "wikilinks_count": 7,
    "wikilinks": [
      "INDEX",
      "exchanges/bybit-lazarus-hack-detailed-analysis",
      "exchanges/jp-vasp-security-audit-certification",
      "security/forensic-identity-anchor-chain",
      "security/fork-and-rebrand-5-layer-audit-framework",
      "systems/INDEX",
      "systems/canton-overview"
    ],
    "resolved_wikilinks": [
      "https://finwiki.zksc.io/INDEX.md",
      "https://finwiki.zksc.io/ja/exchanges/bybit-lazarus-hack-detailed-analysis/",
      "https://finwiki.zksc.io/ja/exchanges/jp-vasp-security-audit-certification/",
      "https://finwiki.zksc.io/ja/security/forensic-identity-anchor-chain/",
      "https://finwiki.zksc.io/ja/security/fork-and-rebrand-5-layer-audit-framework/",
      "https://finwiki.zksc.io/ja/domains/systems/",
      "https://finwiki.zksc.io/ja/systems/canton-overview/"
    ],
    "external_links_count": 0,
    "external_links": []
  },
  "metrics": {
    "nonspace_chars": 2553,
    "word_like_tokens": 419,
    "inbound_wikilinks_count": 7,
    "last_modified": "2026-06-24"
  }
}
