Redirecting you to Reddit in 5 seconds:

https://old.reddit.com/r/netsec/comments/1cd3m7d/dependency_confusion_vulnerability_found_in_an