#Npm

Dependency Confusion: How a Typo Can Hand Attackers Your Production Server 📦💀

In 2021, a security researcher earned $130,000 by uploading fake packages to npm, PyPI, and RubyGems — and they executed code on machines at Apple, Microsoft, and Tesla. Your package manager might be doing the same thing to you right now.