APACHE CORDOVA APP HARNESS TARGETED IN DEPENDENCY CONFUSION ATTACK

Summary from the TLDR InfoSec newsletter

Researchers have discovered a dependency confusion vulnerability affecting the archived Apache Cordova App Harness project. Dependency confusion attacks exploit the fact that package managers prioritize public repositories over private ones, allowing attackers to publish malicious packages with the same name publicly.