Alex Birsan
An independent security researcher known for discovering and disclosing the Dependency Confusion attack in 2021. He demonstrated the vulnerability by successfully delivering malicious public packages sharing names with internal packages to 35 companies, including Apple, Microsoft, and PayPal.
Timeline (last 90 days)
In 2021, security researcher Alex Birsan successfully delivered malicious public packages with the same names as private dependencies to 35 companies including Apple, Microsoft, and PayPal, earning over $130,000 in bug bounties.
In 2021, security researcher Alex Birsan successfully breached the internal systems of 35 tech giants including Apple and Microsoft through a dependency confusion attack.
The dependency confusion attack technique disclosed by Alex Birsan in 2021 affected companies including Apple and Microsoft.
All Facts (3)
In 2021, security researcher Alex Birsan successfully delivered malicious public packages with the same names as private dependencies to 35 companies including Apple, Microsoft, and PayPal, earning over $130,000 in bug bounties.
50%UnverifiedThe dependency confusion attack technique disclosed by Alex Birsan in 2021 affected companies including Apple and Microsoft.
70%UnverifiedIn 2021, security researcher Alex Birsan successfully breached the internal systems of 35 tech giants including Apple and Microsoft through a dependency confusion attack.
50%