@misc{indiciaed2aa7bbf1313, title = {Containing Malicious Package Updates in npm with a Lightweight Permission System}, author = {Gabriel Ferreira and Limin Jia and Joshua Sunshine and Christian Kästner}, year = {2021}, url = {https://arxiv.org/abs/2103.05769}, note = {Source identifier: 2103.05769} }