# Manifest Confusion: Attacking Your Open Source Dependencies

Source: https://listen.dev/blog/npm-manifest-confusion