Measuring and Preventing Supply Chain Attacks on Package Managers [PDF]
arxiv.org