On the feasibility of detecting injections in malicious npm packages. - Simone Scalco; Ranindya Paramitha; Duc-Ly Vu; Fabio Massacci (ARES, 2022)

Hash4Patch: A Lightweight Low False Positive Tool for Finding Vulnerability Patch Commits. - Simone Scalco; Ranindya Paramitha (MSR, 2024)