Containing Malicious Package Updates in npm with a Lightweight Permission System.

Gabriel Ferreira, Limin Jia, Joshua Sunshine, Christian Kstner

Browse the full ICSE paper archive.