言栖资讯 / EnglishTargeted npm dependency confusion attack caught red-handed2022-04-30来源 Snyk BlogEnglishOnce in a while we encounter a truly malicious package that has a purpose, means, and is production-ready — this is a story about one found in npm: gxm-reference-web-auth-server.原文:https://www.a8q9.cn/en/article/targeted-npm-dependency-confusion-attack-caught-red-handed-f6e193.html