170 citations · 564 across the 17 of their papers we have counts for
Showing 2021 · cs.CRShow all
2 papers · 2 filters
cs.CR2021★ 3 cited
Open or Sneaky? Fast or Slow? Light or Heavy?: Investigating Security Releases of Open Source Packages
Nasif Imtiaz, Aniqa Khanom, Laurie Williams
Vulnerabilities in open source packages can be a security risk for the client projects that use these packages as dependencies. When a new vulnerability is discovered in a package,…
cs.CR2021★ 86 cited
What are Weak Links in the npm Supply Chain?
Nusrat Zahan, Thomas Zimmermann, Patrice Godefroid +3
Modern software development frequently uses third-party packages, raising the concern of supply chain security attacks. Many attackers target popular package managers, like npm, an…