3 ms·
Researcher hacks Microsoft, Apple, more in novel supply chain attack
- codevark 6y agoIf each new package name were checked against an immutable blockchain of existing names, and was only allowed if it did not already exist either privately or publicly, would that help mitigate this issue? Maybe packages need a unique GUID in addition to a human readable name? Disclaimer: I play guitar.