dependency-management

2 articles

Lock icon over a chain of software dependency packages

Supply Chain Security: Defending Against Dependency Attacks

A comprehensive guide to protecting your software supply chain from dependency confusion, typosquatting, compromised packages, and build pipeline attacks with practical detection and prevention strategies.

Nov 25, 2024·5 min read

Diagram showing a malicious public package overriding a private internal package through version number manipulation

Security

Dependency Confusion Attacks and How to Prevent Them

How dependency confusion attacks exploit package managers to inject malicious code — and the concrete defenses you can implement to protect your software supply chain.

Oct 21, 2021·4 min read

View all articles