Glossary: Vulnerability, Asset and Change Management

Lookalike package (typosquatting)

Also written: typosquatting, lookalike names, hijacked package

A malicious package published under a name close to a popular one, such as reqeusts for requests, or an abandoned package taken over by an attacker. Check package names and scan dependencies.