You Can Run But You Can't Hide: Runtime Protection Against Malicious Package Updates For Node.js

Marc Ohm, Timo Pohl, Felix Boes

Maliciously prepared software packages are an extensively leveraged weapon for software supply chain attacks. The detection of malicious packages is undoubtedly of high priority an…