Dependency Confusion Attacks: How Package Names Steal Your Code
Dependency confusion attacks exploit package managers by uploading malicious packages with internal names to public registries.
Jan 6, 20265 min read5
Search for a command to run...
Articles tagged with #cybersecurity
Dependency confusion attacks exploit package managers by uploading malicious packages with internal names to public registries.
A couple of months ago I was doing a few penetration tests recently when I encountered Firebase configurations. Each time, I found myself stringing together a bunch of cURL commands and one-off Python scripts to check for common misconfigurations. Af...
