3 million iOS and macOS apps were exposed to potent supply-chain attacks Apps that used code libraries hosted on CocoaPods were vulnerable for about 10 years.

Millions of Apple Applications Were Vulnerable to CocoaPods Supply Chain Attack Your email has been sent The vulnerabilities have since been patched, but had quietly persisted since the CocoaPods ...

Although the hole in the CocoaPods tool is now closed, developers are advised to verify there's nothing rotten in the dependencies used in their existing code.

The open-source Swift and Objective-C repository, CocoaPods, had multiple vulnerabilities that left millions of iOS and macOS apps exposed to potential attacks for a decade, but it is now patched.

The security of millions of iOS apps could have been compromised due to a security vulnerability in the popular dependency manager CocoaPods. Software developers often rely on code written by ...

Millions of iOS and macOS apps have been exposed to a security breach that could be used for potential supply-chain attacks, says an ArsTechnica report based on research by EVA Information ...

The CocoaPods team patched the vulnerabilities in the CocoaPods dependency manager after E.V.A researchers reported them to the open-source project earlier this year.