Anderson Henrique Botega·1d agoDependency Confusion in JavaScript: How I Would Attack and Defend a Modern ProjectThe attack needs no exploit and no stolen credentials, only a package name and a version number.
