Containing Malicious Package Updates in npm with a Lightweight Permission System. - Ferreira, Gabriel; Jia, Limin; Sunshine, Joshua; Kästner, Christian (ICSE: International Conference on Software Engineering, 2021)