Verified record · from the answer index

dependency-confusion

Supply-chain testing via package-manager dependency confusion: when internal package names resolve to attacker-controlled public registries, leading to malicious install and script execution. Use for npm/pip/gem/Maven/Composer/Docker manife

skill:yaklang/hack-skills/dependency-confusion · published by yaklang · source repository