Results 231 to 240 of about 76,371 (261)

Killing Two Birds with One Stone: Malicious Package Detection in NPM and PyPI using a Single Model of Malicious Behavior Sequence

ACM Transactions on Software Engineering and Methodology, 2023
Open source software (OSS) supply chain enlarges the attack surface of a software system, which makes package registries attractive targets for attacks. Recently, multiple package registries have received intensified attacks with malicious packages.
Ju-Nan Zhang, Kaifeng Huang, Yi-Heng Huang, Bihuan Chen, Ruisi Wang, Chong Wang, Xin Peng   +6 more
semanticscholar   +1 more source

Deprecation of Packages and Releases in Software Ecosystems: A Case Study on NPM

IEEE Transactions on Software Engineering, 2022
Deprecation is used by developers to discourage the usage of certain features of a software system. Prior studies have focused on the deprecation of source code features, such as API methods.
F. R. Côgo, G. Oliva, Ahmed E. Hassan
semanticscholar   +1 more source

An Empirical Study of Dependency Downgrades in the npm Ecosystem

IEEE Transactions on Software Engineering, 2021
In a software ecosystem, a dependency relationship enables a client package to reuse a certain version of a provider package. Packages in a software ecosystem often release versions containing bug fixes, new functionalities, and security enhancements ...
F. R. Côgo, G. Oliva, Ahmed E. Hassan
semanticscholar   +1 more source

DONAPI: Malicious NPM Packages Detector using Behavior Sequence Knowledge Mapping

USENIX Security Symposium
With the growing popularity of modularity in software development comes the rise of package managers and language ecosystems. Among them, npm stands out as the most extensive package manager, hosting more than 2 million third-party open-source packages ...
Cheng Huang, Nannan Wang, Ziteng Wang, Siqi Sun, Lingzi Li, Junren Chen, Qianchong Zhao, Jiaxuan Han, Zhen Yang, Lei Shi   +9 more
semanticscholar   +1 more source

Maltracker: A Fine-Grained NPM Malware Tracker Copiloted by LLM-Enhanced Dataset

International Symposium on Software Testing and Analysis
As the largest package registry, Node Package Manager (NPM) has become the prime target for various supply chain attacks recently and has been flooded with numerous malicious packages, posing significant security risks to end-users.
Zeliang Yu, Ming Wen, Xiaochen Guo, Hai Jin   +3 more
semanticscholar   +1 more source

Investigating The Reproducibility of NPM Packages

IEEE International Conference on Software Maintenance and Evolution, 2020
Node.js has been popularly used for web application development, partially because of its large software ecosystem known as NPM (Node Package Manager) packages.
Pronnoy Goswami, Saksham Gupta, Zhiyuan Li, Na Meng, Daphne Yao   +4 more
semanticscholar   +1 more source

A formal framework for measuring technical lag in component repositories — and its application to npm

J. Softw. Evol. Process., 2019
Reusable Open Source Software (OSS) components for major programming languages are available in package repositories. Developers rely on package management tools to automate deployments, specifying which package releases satisfy the needs of their ...
Ahmed Zerouali, T. Mens, Jesus M. Gonzalez-Barahona, Alexandre Decan, Eleni Constantinou, G. Robles   +5 more
semanticscholar   +1 more source

Simplifying the Search of npm Packages

Information and Software Technology, 2020
Context Code reuse, generally done through software packages, allows developers to reduce time-to-market and improve code quality. The npm ecosystem is a Node.js package management system which contains more than 700 K Node.js packages and to help ...
Ahmad Abdellatif, Yi Zeng, Mohamed Elshafei, Emad Shihab, Wei-Yi Shang   +4 more
semanticscholar   +1 more source

Examining the unintended outcomes of NPM reforms in Indonesia

Public Money & Management, 2019
This paper argues that despite Indonesia’s implementation of public sector reforms, the impact of these reforms has yet to achieve the goal of improving governance and preventing corruption.
Harun Harun, Monir Mir, David Carter, Yi An   +3 more
semanticscholar   +1 more source

Fusion of a kinase gene, ALK, to a nucleolar protein gene, NPM, in non-Hodgkin's lymphoma.

Science, 1994
S. Morris, M. Kirstein, M. Valentine, K. Dittmer, D. Shapiro, D. Saltman, A. Look   +6 more
semanticscholar   +1 more source