Malicious Dependency

Definition ∞ A malicious dependency refers to a software component or library incorporated into a larger system that contains hidden vulnerabilities or intentional harmful code. This dependency, often sourced from external repositories, can compromise the security and integrity of the entire application. It represents a significant supply chain risk in software development, particularly within open-source ecosystems. Such components can facilitate unauthorized access or data corruption.
Context ∞ Reports of malicious dependencies frequently surface in cybersecurity news, highlighting the constant threat to digital infrastructure, including blockchain projects. The increasing reliance on third-party code in decentralized application development makes this a critical security concern. Discussions often revolve around improved auditing practices, dependency scanning tools, and secure software supply chain management to mitigate these risks.