Dependency confusion attacks, where package managers override local packages with global ones, are flourishing, impacting Microsoft, Zillow, Lyft, and others (Dan Goodin/Ars Technica)

Dan Goodin / Ars Technica:Dependency confusion attacks, where package managers override local packages with global ones, are flourishing, impacting Microsoft, Zillow, Lyft, and othersNew dependency confusion attacks take aim at Microsoft, Amazon, Slack, Lyft, and Zillow.A new type of supply chain attack unveiled
Click here to read full news..