Muhammad Usman

Senior Java developer by day, building Marshal on the side. About 10 years of experience with Spring Boot, Maven, and build tooling. Marshal is an open-source behavioral security scanner for JVM dependencies.

1 article

Jul 3, 2026 Muhammad Usman

This Dependency Update Looked Exactly Like an Account Takeover

I pointed a scanner I have been building at an old Spring project, and it flagged javax.activation. The bump was 1.1-rev-1 to 1.1.1. Prior …

Gradle Java