Supply Chain Attack on Composer
blog.sonarsource.com
blog.sonarsource.com
- Hacking 3,000,000 apps at once through CocoaPods - https://justi.cz/security/2021/04/20/cocoapods-rce.html
- Remote code execution in Homebrew by compromising the official Cask repository - https://blog.ryotak.me /post/homebrew-security-incident-en/
- Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies - https://medium.com/@alex.birsan/dependency-confusion-4a5d60f...