Vulnerabilities
Malicious Typosquatted Packages: How Spelling Errors Compromise Software Supply Chains
Typosquatting exploits human error in package resolution, allowing attackers to inject code before security tools inspect the legitimate software.
dependency management
Everything Packet Tribune has reported about dependency management: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Dependency Updates: Mechanism, Risk and Maintenance Strategy
Updating dependencies is not merely a repair task; it is a continuous negotiation between software stability and the shrinking window of exploitability.