Dependency Confusion - package substitution attacks

info

This article is work in progress