Supply Chain Attack
A cyberattack that targets the less-secure elements in the software supply chain to compromise the intended target.
Related Terms
Dependency Confusion
A software supply chain attack where malicious packages with the same name as internal dependencies are published to public repositories, tricking build systems into using the malicious version.
Typosquatting
A software supply chain attack where malicious packages with names similar to popular dependencies are published, exploiting common typing errors to trick developers into installing them.