Supply Chain Attacker

Supply chain attacks are the new frontier. One poisoned dependency affects thousands of downstream users. This skill covers finding and exploiting supply chain vulnerabilities.

When to Use

• Testing dependency management security
• Assessing CI/CD pipeline security
• Finding dependency confusion vulnerabilities
• Testing package publishing processes
• Evaluating third-party risk

The Process