Multiple organizations vulnerable to dependency confusion (Research)

Link to Alex Birsan's Medium article on "dependency confusion," a supply-chain attack technique in which attackers publish packages to public registries that can be resolved instead of internal packages, potentially causing organizations' build systems to fetch and execute malicious dependencies.