Several Malicious Typosquatted Python Libraries Found On PyPI RepositoryThe Hacker News·Jul 30, 08:18 UTC · Jul 30, 2021Malware42
Dependency Confusion: Another Supply-Chain VulnerabilitySchneier on Security·Mar 15, 13:39 UTC · Mar 15, 2021Vulnerability42
Dependency Confusion Supply-Chain Attack Hit Over 35 HighThe Hacker News·Feb 10, 12:57 UTC · Feb 10, 2021Vulnerability42
Backdoor vulnerability in open source tool exposes thousands of apps to remote code executionCyberScoop·Apr 4, 20:51 UTC · Apr 4, 2019Vulnerability in the wild60