Maven-Hijack: Software Supply Chain Attack Exploiting Packaging Order

Name: Maven-Hijack: Software Supply Chain Attack Exploiting Packaging Order
Uploaded: 2026-08-20T17:06:01.586263+00:00
Duration: 697 s
Description: The episode analyzes 'Maven-Hijack,' a supply chain attack exploiting dependency packaging order in Java projects. The attack uses a malicious class placed earlier in the build process to shadow legitimate code, demonstrated on the Corona-Warn-App. Key defenses discussed include the practical Maven Enforcer plugin, which catches conflicts at build time.

The episode analyzes 'Maven-Hijack,' a supply chain attack exploiting dependency packaging order in Java projects. The attack uses a malicious class placed earlier in the build process to shadow legitimate code, demonstrated on the Corona-Warn-App. Key defenses discussed include the practical Maven Enforcer plugin, which catches conflicts at build time.

Open the full episode