Dependency Confusion is a software supply chain attack technique in which an adversary uploads malicious packages with names resembling legitimate internal dependencies to public repositories, thereby exploiting ambiguous resolution mechanisms to trick automated build systems into downloading and executing the attacker-controlled packages instead of the intended private ones.