Maven-Hijack: Software Supply Chain Attack Exploiting Packaging Order · HackerPapers discussionshttps://hackerpaper.kaipfister.de/p/2407.18760/Collected HN comments and submissions linking this paper.enMon, 02 Nov 2026 11:16:22 GMTMaven-Hijack: Software Supply Chain Attack Exploiting Packaging Order — mentioned by viraptorhttps://news.ycombinator.com/item?id=46033016urn:hackerpapers:mention:2407.18760:46033016Mon, 24 Nov 2025 11:42:35 GMT<p>There were. They&#x27;re just not as popular here. For example https://www.sonatype.com/blog/malware-removed-from-maven-cen... Maven is also a bit more complex than npm and had an issue in the system itself https://arxiv.org/html/2407.18760v4</p><p><a href="https://hackerpaper.kaipfister.de/p/2407.18760/">Paper and discussion history</a>. A mention is not an endorsement.</p>cs.CR