Bundler Is Still Vulnerable to Dependency Confusion Attacks
zofrex.com