Dependency Substitution Attacks is a type of software supply chain attack in which an attacker replaces a legitimate software dependency with a malicious substitute that mimics the original’s interface or functionality to compromise the integrity, confidentiality, or availability of the target system.