Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies The Story of a Novel Supply Chain Attack

Kind reminder
: The level of trust we put in a simple command like "pip install package_name" need to be challenged

#supplychainattack #dependencyconfusion
#dependencyconfusionattack
#cybersecurity