Man In The Middle (MitM)
hubl-server is vulnerable to man-in-the-middle MitM attacks. These attacks are possible because the api.hubapi.com url that the dependencies are retrieved from redirects to a HTTP url. This gives attackers the ability to compromise the integrity of the packages as they are being downloaded...