Read the original article: Vulnerability in CocoaPod Dependency Manager Exposed Millions of Apps
A remote code execution vulnerability identified on the central CocoaPods server could have allowed an attacker to poison any package download, security researcher Max Justicz reveals.