Dependency confusion
An attack where a malicious package is mistaken for, or substituted in place of, a legitimate one by name.
Learn it through a story
- The Tool Nobody Approved (Cybersecurity for Juniors 3, Ch 7)
Related terms
- Deepfake A fake photo or video of a real person, made with AI.
- Default credentials Factory-set usernames and passwords, identical across every unit of a device.
- Defence in depth Using many layers of protection, not just one.
- Domain spoofing Making an email look like it's from a trusted company by faking the display name, while the real sending address is different.
- DPDP Act (Digital Personal Data Protection Act, 2023) India's core law governing personal data collection and use.
- EDR Endpoint detection and response, tooling that watches devices and servers for suspicious activity.