The upstream article was posted yesterday, here "Dependency Confusion: RCE via internal package name squatting " https://news.ycombinator.com/item?id=26081149

The upstream article was posted yesterday, here "Dependency Confusion: RCE via internal package name squatting " https://news.ycombinator.com/item?id=26081149 https://news.ycombinator.com/item?id=26081149 "Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies, The Story of a Novel Supply Chain Attack, Alex Birsan" https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610 https://medium.com/@alex.birsan/dependency-confusion-4a5d60f...