Small World with High Risks: A Study of Security Threats in the npm Ecosystem. - Markus Zimmermann; Cristian-Alexandru Staicu; Cam Tenny; Michael Pradel (USENIX Security Symposium, 2019)