TY - RPRT TI - Containing Malicious Package Updates in npm with a Lightweight Permission System AU - Gabriel Ferreira AU - Limin Jia AU - Joshua Sunshine AU - Christian Kästner PY - 2021 UR - https://arxiv.org/abs/2103.05769 ID - 2103.05769 ER -