Dependency Confusion: Another Supply-Chain Vulnerability – Schneier on Security

https://www.schneier.com/blog/archives/2021/02/dependency-confusion-another-supply-chain-vulnerability.html