- Tue 16 February 2021
- Home, obviously
- responses
- Michiel Scholten
Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies
A few full days of searching for private package names belonging to some of the targeted companies revealed that many other names could be found on GitHub, as well as on the major package hosting services — inside internal packages which had been accidentally published — and even within posts on various …