Microsoft PowerShell Gallery vulnerable to spoofing, supply chain attacks

Lax policies for package naming on Microsoft's PowerShell Gallery code repository allow threat actors to perform typosquatting attacks, spoof popular packages and potentially lay the ground for massive supply chain attacks. [...]

attacks code code repository gallery microsoft package packages policies popular powershell repository security spoof spoofing supply supply chain supply chain attacks threat threat actors typosquatting typosquatting attacks vulnerable