Multiple organizations vulnerable to dependency confusion