# Package Managers -- Dependency Confusion

**URL:** <https://discourse.julialang.org/t/package-managers-dependency-confusion/55003>\
**Category:** Tooling\
**Tags:** package\
**Created:** [February 10, 2021, 3:44pm UTC](https://discourse.julialang.org/t/package-managers-dependency-confusion/55003 "2021-02-10T15:44:26Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![cce](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/cce/32/460_2.png) [@cce](https://discourse.julialang.org/u/cce)\
**Post date:** [February 10, 2021, 3:44pm UTC](https://discourse.julialang.org/t/package-managers-dependency-confusion/55003/1 "2021-02-10T15:44:26Z")

</div>

There is an interesting blog today about how dependency confusion (when private packages are registered publicly) as a security challenge.

> **[Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other...](https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610)**
>
> The Story of a Novel Supply Chain Attack

---

<div class="post-metadata">

**Author:** ![dilumaluthge](https://sea2.discourse-cdn.com/julialang/user_avatar/discourse.julialang.org/dilumaluthge/32/29283_2.png) [@dilumaluthge](https://discourse.julialang.org/u/dilumaluthge)\
**Post date:** [February 10, 2021, 3:50pm UTC](https://discourse.julialang.org/t/package-managers-dependency-confusion/55003/2 "2021-02-10T15:50:42Z")

</div>

[https://github.com/JuliaLang/Pkg.jl/issues/2393](https://github.com/JuliaLang/Pkg.jl/issues/2393)