A Review of Attacks Against Language-Based Package Managers
arxiv.org