Again, that's only an aggravating factor, not the root cause. Supply chain attacks can happen in literally any language that has a package manager. Here's a si

Again, that's only an aggravating factor, not the root cause. Supply chain attacks can happen in literally any language that has a package manager. Here's a similar issue that occurred with Python's PIP just this year: https://portswigger.net/daily-swig/dependency-confusion-attack-mounted-via-pypi-repo-exposes-flawed-package-installer-behavior https://portswigger.net/daily-swig/dependency-confusion-atta...