NodeShield: Runtime Enforcement of Security-Enhanced SBOMs for Node.js

Eric Cornelissen, Musard Balliu

The software supply chain is an increasingly common attack vector for malicious actors. The Node.js ecosystem has been subject to a wide array of attacks, likely due to its size an…