TGViewer
CloudSec Wine CloudSec Wine @cloud_sec · 2.27K subscribers
Post #424 779
🔶 Dependency confusion in AWS CodeArtifact

At the time of the finding Code Artifact did not have any features to specify which packages were internal and therefore should not be pulled from public repositories.

https://zego.engineering/dependency-confusion-in-aws-codeartifact-86b9ff68963d?gi=eb56bfabbd85

#aws
Medium Dependency confusion in AWS CodeArtifact Last year we found AWS Code Artifact to be vulnerable to dependency confusion. This blogs covers the disclosure and remediation process.
  • 👏 1
Open in Telegram All posts from @cloud_sec
More from @cloud_sec
  1. Oct 12, 2026🤖 The AI SDLC transformation playbook Atlassian's shared their own version of an AI SDLC…
  2. Oct 9, 2026⚠️ Discovering and exploiting a remote code execution vulnerability in OpenCode Datadog Se…
  3. Oct 8, 2026🤖 How DigitalOcean Manages Credentials for Autonomous Agents DigitalOcean Managed Agents…
  4. Oct 7, 2026👩‍💻 Storm-3168: Agentic-driven cloud attacks using compromised service principals Storm-…
  5. Oct 6, 2026🤖 Securing the software factory at machine speed GitLab's CISO argues that agentic AI dev…
  6. Oct 5, 2026🤖 Throw Away the Playbook: Security in the AI-Native SDLC We, as an industry, should have…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →