HP's 2004 order-processing and supply-chain migration caused a backlog and revenue disruption in Enterprise Servers and Storage, exposing the danger of insufficient contingency planning during consolidation.
Target Canada's SAP-based supply-chain platform was undermined by inaccurate product and inventory data, contributing to empty shelves, overloaded distribution centers, and a launch that never stabilized.
Nike's 2001 i2 disruption produced product shortages, excesses, and late deliveries, but the deeper story involved forecasting design, customization, integration, and ambitious supply-chain transformation.
The event-stream incident showed how transferring maintainership of a trusted npm package could let a malicious dependency enter downstream applications and target cryptocurrency wallets.
The SolarWinds Orion compromise inserted malicious code into the vendor's build process so signed software updates carried SUNBURST into customer environments.
Codecov's 2021 compromise turned a widely downloaded CI uploader into a secret-exfiltration path after an attacker recovered a cloud credential from a Docker image layer.
In October 2021, attackers compromised the npm publishing account behind ua-parser-js and released malicious versions containing cryptocurrency-mining and credential-stealing components.
The 3CX compromise became a rare cascading supply-chain attack: a trojanized X_TRADER installer compromised an employee, then attackers used 3CX's own build environment to distribute malicious desktop software.
The XZ Utils backdoor was discovered before it reached most stable Linux distributions, but it showed how patient social engineering and release engineering could place malicious code near SSH authentication.