))
Dependency Confusion As A Tool For Targeted NPM Hacks
Manage episode 340664689 series 3393145
内容由ReversingLabs Inc.提供。所有播客内容（包括剧集、图形和播客描述）均由 ReversingLabs Inc. 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。
NPM dependency confusion has emerged as a potent software supply chain attack vector via platforms like npm, with malicious packages surreptitiously added to these repositories, maintained by leading firms.
In this episode, we're joined by ReversingLabs Reverse Engineer Karlo Zanki to dig into some of our recent findings that show dependency confusion attacks are being used to advance what appear to be targeted supply chain attacks. We will also talk about how development organizations can monitor for and prevent these kinds of attacks.
41集单集
分享
