Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies

The Story of a Novel Supply Chain Attack

Ever since I started learning how to code, I have been fascinated by the level of trust we put in a simple command like this one:

pip install package_name