Maven-Hijack: Software Supply Chain Attack Exploiting Packaging Order

Frank Reyes, Federico Bono, Aman Sharma +2

Java projects frequently rely on package managers such as Maven to manage complex webs of external dependencies. While these tools streamline development, they also introduce subtl…