Wolf at the Door: Preventing Install-Time Attacks in npm with Latch. - Elizabeth Wyss; Alexander Wittman; Drew Davidson; Lorenzo De Carli (AsiaCCS, 2022)