Your Ultimate Pentesting Arsenal
Downloading code without integrity verification
Unsigned updates
Dependencies from untrusted sources