Man-in-the-Middle (MitM)

Xtend Maven Plugin is vulnerable to man-in-the-middle (MitM) attack. The plugins are downloaded over an insecure HTTP channel, which would allow a man-in-the-middle attacker to modify and add malicious code into the plugins.