research
∙
07/18/2023
The Hitchhiker's Guide to Malicious Third-Party Dependencies
The increasing popularity of certain programming languages has spurred t...
share
research
∙
04/11/2023
Journey to the Center of Software Supply Chain Attacks
This work discusses open-source software supply chain attacks and propos...
research
∙
10/08/2022
Towards the Detection of Malicious Java Packages
Open-source software supply chain attacks aim at infecting downstream us...
research
∙
08/11/2021
The Used, the Bloated, and the Vulnerable: Reducing the Attack Surface of an Industrial Application
Software reuse may result in software bloat when significant portions of...
research
∙
08/11/2020
Code-based Vulnerability Detection in Node.js Applications: How far are we?
With one of the largest available collection of reusable packages, the J...
research
∙
08/29/2018