Proposed additions to supply chain security compromises list

[kurtseifried]

trafficstars

for https://github.com/cncf/tag-security/blob/main/supply-chain-security/compromises/README.md

pypi ctx: https://python-security.readthedocs.io/pypi-vuln/index-2022-05-24-ctx-domain-takeover.html https://blog.sonatype.com/pypi-package-ctx-compromised-are-you-at-risk

left-pad: https://www.theregister.com/2016/03/23/npm_left_pad_chaos/

[PushkarJ]

Thank you for opening this issue!!

@kurtseifried : Would you mind opening a PR to add these to the list? Apologies if you already did and I missed it

[stale[bot]]

This issue has been automatically marked as inactive because it has not had recent activity.

[sublimino]

@kurtseifried any chance you have a moment to raise a PR or two here? No problem if not :pray:

[Caze121]

This seems to be publishing infrastructure, similar to SolarWinds, does that sound about right?

Comm100: https://www.securityweek.com/supply-chain-attack-targets-customer-engagement-firm-comm100?utm_medium=email&utm_source=Eloqua&ref=GBSNewsletterEmail

[szh]

Ctx is also mentioned in #914

[tahirraza]

Don't seem like @kurtseifried seeing your response.

[stale[bot]]

This issue has been automatically marked as inactive because it has not had recent activity.

[anvega]

Please file these as a PR if missing from the catalog.