~ / skills / devops / dep-confusion

dep-confusion

Dependency confusion — publish a higher-version internal package name on public registry (npm/PyPI/Maven/Crates) to coerce CI/CD into pulling attacker code.

Industry: devops
License: Unverified
Source repo: PurpleAILAB/Decepticon · ★ 4,707
Source file: packages/decepticon/decepticon/skills/standard/exploit/supplychain/dep-confusion/SKILL.md

View full SKILL.md on GitHub →

不会安装？看中文图文教程 →