Dependency Confusion — Dependency confusion exploits ambiguity in how software selects packages with particular names. A system obtains an attacker-controlled package instead of the intended dependency. The malicious package then enters a development or execution environment through trusted workflows. – Software Supply Chain Attacks

Added October 7, 2026

Dependency Confusion — Dependency confusion exploits ambiguity in how software selects packages from different sources. A malicious package appears to satisfy a dependency that the developer intended to obtain elsewhere. Automated installation then introduces unauthorized code into trusted workflows. – Software Supply Chain Attacks

Added October 7, 2026