MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries

Several public and popular libraries abandoned but still used in Java and Android applications have been found susceptible to a new software supply chain attack method called MavenGate.
"Access to projects can be hijacked through domain name purchases and since most default build configurations are vulnerable, it would be difficult or even impossible to know whether an attack was being performed

access android applications attack build called can default domain domain name found hackers hijack hijacked java libraries name popular projects public software software supply chain software supply chain attack supply supply chain supply chain attack vulnerable