https://advisories.gitlab.com/pypi/pipreqs/CVE-2023-31543/
pipreqs vulnerable to Dependency Confusion | GitLab Advisory Database (GLAD)
CVE-2023-31543 pipreqs vulnerable to Dependency Confusion: A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via...
dependency confusionvulnerablegitlabadvisorydatabase
https://thehackernews.com/2021/02/dependency-confusion-supply-chain.html
Dependency Confusion Supply-Chain Attack Hit Over 35 High-Profile Companies
A Novel Dependency Confusion Supply-Chain Attack Hit Over 35 Organizations
supply chain attackdependency confusionhigh profile
https://shopify.engineering/fixing-dependency-confusion-ruby-applications
Fixing the Dependency Confusion Vulnerability in 600+ Ruby Apps - Shopify
How Shopify solved the dependency confusion vulnerability in over 600 Ruby applications and created tailored large-scale migration tooling to make it easier.
dependency confusionruby appsfixingvulnerabilityshopify
https://experienceleague.adobe.com/en/docs/experience-cloud-kcs/kbarticles/ka-26900?lang=en
Composer plugin against Dependency Confusion attacks | Adobe Commerce
Learn how to prevent Dependency Confusion attacks in Adobe Commerce using the composer plugin and secure your composer install/update process.
dependency confusioncomposerpluginattacksadobe
https://peps.python.org/pep-0708/
PEP 708 – Extending the Repository API to Mitigate Dependency Confusion Attacks | peps.python.org
Dependency confusion attacks, in which a malicious package is installed instead of the one the user expected, are an increasingly common supply chain threat....