Dependency Confusion Attack - Dub affected?

[Jacob Carlborg]

I recently read this [1] interesting article. Would Dub affected 
by this? Based on what I could find in the Dub documentation, it 
looks like Dub would **not** be affected. According to the 
documentation Dub will try custom registers first, is that 
correct?

[1] 
https://www.bleepingcomputer.com/news/security/researcher-hacks-over-35-tech-firms-in-novel-supply-chain-attack/

--
/Jacob Carlborg