Skip to content

Topic

Import path hijacking

Techniques that abuse a language's module resolution order so attacker-supplied code loads in place of a trusted library, such as a file shadowing a standard-library module in the working directory.

Current clusters