Dependency confusion allows bad actors to emulate internal software packages to gain access to developer workstations and critical build infrastructure. Understand this entirely new supply chain issue and how to manage against it.