The DOI matches its Crossref record; 93 of the 94 references it cites were found in a registry or an index.
SoK: Taxonomy of Attacks on Open-Source Software Supply Chains
Open accessAbstract
The widespread dependency on open-source software makes it a fruitful target for malicious actors, as demonstrated by recurring attacks. The complexity of today’s open-source supply chains results in a significant attack surface, giving attackers numerous opportunities to reach the goal of injecting malicious code into open-source artifacts that is then downloaded and executed by victims.This work proposes a general taxonomy for attacks on open-source supply chains, independent of specific programming languages or ecosystems, and covering all supply chain stages from code contributions to package distribution. Taking the form of an attack tree, it covers 107 unique vectors, linked to 94 real-world incidents, and mapped to 33 mitigating safeguards.User surveys conducted with 17 domain experts and 134 software developers positively validated the correctness, comprehensiveness and comprehensibility of the taxonomy, as well as its suitability for various use-cases. Survey participants also assessed the utility and costs of the identified safeguards, and whether they are used.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“PQC transition affects all three due to increased key sizes, larger signature sizes, and hybrid mode requirements during the transition period [17,18].”
From AI Supply Chain Security: MBOM-PQC Provenance, PQC Attestation, and a Maturity Model for Quantum-Resistant Assurance (2026) · cites this paper as [17]
Experimental — accuracy not yet measuredThe check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“IETF drafts for hybrid key exchange [17,18], PQC certificate profiles, and composite signature formats are still in progress.”
From AI Supply Chain Security: MBOM-PQC Provenance, PQC Attestation, and a Maturity Model for Quantum-Resistant Assurance (2026) · cites this paper as [17]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Systematic Literature Reviews in Software Engineering—A Systematic Literature Review
Kitchenham, B., Pearl Brereton, O., Budgen, D., Turner, M., Bailey, J., & Linkman, S. (2009) · Information and Software Technology · doi:10.1016/j.infsof.2008.09.009 · Cited by 4,537
Experimentation in Software Engineering
Wohlin, C., Runeson, P., Höst, M., Ohlsson, M. C., Regnell, B., & Wesslén, A. (2012) · doi:10.1007/978-3-642-29044-2 · Cited by 4,460
Goodman, L. A. (1961) · The Annals of Mathematical Statistics · doi:10.1214/aoms/1177705148 · Cited by 3,606
2017 USENIX Annual Technical Conference (USENIX ATC'17)
Quoc, D. L., Beck, M. S., Bhatotia, P., Chen, R., Fetzer, C. W., & Strufe, T. (2017) · Cited by 3,091
Durumeric, Z., Li, F., Kasten, J., Amann, J., Beekman, J. G., Payer, M., Weaver, N., Adrian, D., Paxson, V., Bailey, M., et al. (2014) · ACM Internet Measurement Conference (IMC) · doi:10.1145/2663716.2663755 · Cited by 692
Thompson, K. (1984) · Communications of the ACM · doi:10.1145/358198.358210 · Cited by 670
Malware Obfuscation Techniques: A Brief Survey
You, I., & Yim, K. (2010) · 2010 International Conference on Broadband, Wireless Computing, Communication and Applications · doi:10.1109/bwcca.2010.85 · Cited by 607
Mauw, S., & Oostdijk, M. (2006) · Lecture notes in computer science · doi:10.1007/11734727_17 · Cited by 504
(2008) · doi:10.1016/b978-0-12-373558-4.x0001-5 · Cited by 287
Backstabber’s Knife Collection: A Review of Open Source Software Supply Chain Attacks
Ohm, M., Plate, H., Sykosch, A., & Meier, M. (2020) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-52683-2_2 · Cited by 259
Self-citation
Research works printed but not linked: 19
- Clancy, 2021, Deliver uncompromised: Securing critical software supply chains, MITRE Technical Papers, 24
- Wu, On the feasibility of stealthily introducing vulnerabilities in open-source software via hypocrite commits
- Haddad, 2011, Understanding the open source development model, Linux Journal
- Cox, 2019, Our software dependency problem
- Schneier, 1999, Attack trees, Dr. Dobb’s journal, 24, 21
- Spencer, 2009, Card sorting: Designing usable categories
- Du, Towards an analysis of software supply chain risk management, 1
- Tschacher, 2016, Typosquatting in programming language package managers
- An emergency re-review of kernel commits authored by members of the university of minnesota, due to the hypocrite commits research paper
- Kuppusamy, Mercury: Bandwidth-effective prevention of rollback attacks against community repositories, 673
- McClure, 2010, Protecting your critical assets-lessons learned from operation aurora, Tech. Rep.
- Goerigk, On trojan horses in compiler implementations
- Kuppusamy, Diplomat: Using delegations to protect community repositories, 567
- Alhamed, Security by decentralized certification of automatic-updates for open source software controlled by volunteers
- Almubayed, 2019, Practical approach to automate the discovery and eradication of opensource software vulnerabilities at scale, Blackhat USA
- 10.1007/978-3-030-65745-1_7 · DOI
- Lamowski, Sand-crust: Automatic sandboxing of unsafe components in rust, 51
- 10.1002/smr.1893 · DOI
- 10.1109/CSAC.2005.17 · DOI
Cited by
Sorted by citations
Items 101–200 of 208
Antar, S. S., Charland, P., Ding, S. H. H., & Fung, B. C. M. (2025) · International Conference on Cyber Conflict · doi:10.23919/cycon65856.2025.11103589 · Cited by 2
Localisation of an assessment tool for disease registry software
Isfahani, S. S., Jabali, M. S., Sedaghat, S., Jalali, R., & Bagherian, H. (2025) · Health Information Management Journal · doi:10.1177/18333583251362536 · Cited by 1
Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floatingƒ
Rahman, I., Marley, J., Enck, W., & Williams, L. A. (2025) · IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1109/ase63991.2025.00229 · Cited by 1
The Hidden Dangers of Public Serverless Repositories: An Empirical Security Assessment
Marin, E., Kim, J., Pavoni, A., Conti, M., & Pietro, R. D. (2025) · Lecture notes in computer science · doi:10.1007/978-3-032-07894-0_20 · Cited by 1
Detecting Malicious Packages in PyPI and NPM by Clustering Installation Scripts
Liang, W., Ling, X., Zhao, C., Wu, J., Luo, T., & Wu, Y. (2025) · IEEE Transactions on Software Engineering · doi:10.1109/tse.2025.3618952 · Cited by 1
Kreyssig, B., Houy, S., Riom, T., & Bartel, A. (2025) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3719027.3765031 · Cited by 1
SBOM generation based on code-level external component trees
Kong, X., Zhuo, H., Miao, X., Wei, H., & Du, J. (2025) · Scientific Reports · doi:10.1038/s41598-025-29762-0 · Cited by 1
Luo, J., Huang, Z., & Jian-hua, G. (2026) · IET Software · doi:10.1049/sfw2/2169889 · Cited by 1
ProfMal: Detecting Malicious NPM Packages by the Synergy between Static and Dynamic Analysis
Huang, Y., Zheng, W., Wu, S., Chen, B., Lu, Y. J., Zhou, Z., Cao, Y., Li, X., & Peng, X. (2025) · IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1109/ase63991.2025.00042 · Cited by 1
Altered Histories in Version Control System Repositories: Evidence from the Trenches
Rapaport, S., Pautet, L., Tardieu, S., & Zacchiroli, S. (2025) · IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1109/ase63991.2025.00181 · Cited by 1
AI-Assisted Detection of Malicious Changes in Infrastructure-as-Code for Secure DevOps
Sudarsan, S., Agrawal, M., & Banerjee, A. (2026) · IEEE International Conference on AI in Cybersecurity (ICAIC) · doi:10.1109/icaic67076.2026.11395715 · Cited by 1
Snake in the Grass: A Hybrid Detection Method Targeting Malicious PyPI Packages
Huang, C., Zeng, Y., Liang, G., Yang, Z. Y., & Du, Y. (2026) · IEEE Transactions on Reliability · doi:10.1109/tr.2026.3676895 · Cited by 1
Effect of Shift-Left Security Testing on Early Vulnerability Detection in CI/CD Pipelines
Thanvi, Y. S., Pappu, K., & Parashar, A. (2026) · IEEE SoutheastCon · doi:10.1109/southeastcon63549.2026.11476382 · Cited by 1
Yu, H., Khan, F., Ding, S. H. H., Wu, J., Stakhanova, N., & Fung, B. C. M. (2026) · Computers & Security · doi:10.1016/j.cose.2026.104923 · Cited by 1
ORCA: Unveiling Obscure Containers In The Wild
Bufalino, J., Blaise, A., & Secci, S. (2025) · ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses (SCORED) · doi:10.1145/3733827.3765531 · Cited by 1
Function-Level Code Obfuscation Detection Through Self-Attention-Guided Multi-Representation Fusion
Tian, Z., He, R., Hong-liang, Z., & Chen, L. (2023) · International Journal of Software Engineering and Knowledge Engineering · doi:10.1142/s0218194023500663 · Cited by 1
Comparing Software Supply Chain Protection Approaches
Zottmann, C. E. M., do Amaral, T. M. S., Nunes, R. R., & Gondim, J. J. C. (2023) · Workshop on Communication Networks and Power Systems (WCNPS) · doi:10.1109/wcnps60622.2023.10344631 · Cited by 1
Security Risk Indicator for Open Source Software to Measure Software Development Status
Kuzuno, H., Yano, T., Omo, K., van der Ham, J., & Yamauchi, T. (2024) · Lecture notes in computer science · doi:10.1007/978-981-99-8024-6_12 · Cited by 1
Assessing the Threat Level of Software Supply Chains with the Log Model
Soeiro, L., Robert, T., & Zacchiroli, S. (2023) · IEEE International Conference on Big Data (BigData) · doi:10.1109/bigdata59044.2023.10386091 · Cited by 1
PraxiPaaS: A Decomposable Machine Learning System for Efficient Container Package Discovery
Zhang, Z., Kumar, R. S., Li, J., Korver, L., Byrne, A., Stringhini, G., Matta, I., & Coskun, A. K. (2024) · IEEE International Conference on Cloud Engineering · doi:10.1109/ic2e61754.2024.00027 · Cited by 1
ROSA: Finding Backdoors with Fuzzing
Kokkonis, D., Marcozzi, M., Decoux, E., & Zacchiroli, S. (2025) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1109/icse55347.2025.00183 · Cited by 1
Scalable techniques for risk assessment of open-source libraries
Badyal, N. (2023) · doi:10.32657/10356/173692 · Cited by 1
Taxiote: Taxonomy and Practical Guide for Testing of Iot SystemsPreprint
Minani, J. B., Fellah, A. E., Sabir, F., Moha, N., Guéhéneuc, Y., Kuradusenge, M., & Masuda, T. (2024) · SSRN Electronic Journal · doi:10.2139/ssrn.4806122 · Cited by 1
Campbell, R. (2026) · Systems · doi:10.3390/systems14050593 · Cited by 3
Methodological and implementation aspects of introducing secure software development processes
Arustamyan, S. S., Varenitca, V. V., & Markov, A. S. (2023) · Bezopasnost informacionnyh tehnology · doi:10.26583/bit.2023.2.01
Thabet, K., Bennaceur, J., Hamza, S., & Djemaa, R. B. (2023) · IEEE International Conference on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE) · doi:10.1109/wetice57085.2023.10477837
Evaluating Security and Community Health Metrics of FOSS Repositories
-, N. S., -, A. T., -, S. S., & Raul, N. (2024) · International Journal For Multidisciplinary Research · doi:10.36948/ijfmr.2024.v06i02.16980
SoK: Security and Privacy of Blockchain Interoperability [Extended Version]Preprint
Augusto, A., Belchior, R., Correia, M. P., Vasconcelos, A., Zhang, L., & T, T. H. M. I. (2024) · doi:10.36227/techrxiv.24595764.v3
SWDNet: Stealth Web Shell Detection Technology based on Triplet Network
Zhang, J., Dai, F., Cao, Y., Tan, R., Cui, X., & Liu, Q. (2023) · International Conference on Mobility, Sensing and Networking (MSN) · doi:10.1109/msn60784.2023.00066
What Can Self-Admitted Technical Debt Tell Us About Security? A Mixed-Methods Study
Ferreyra, N. E. D., Shahin, M., Zahedi, M., Quadri, S., & Scandariato, R. (2024) · International Conference on Mining Software Repositories (MSR) · doi:10.1145/3643991.3644909
GoSurf: Identifying Software Supply Chain Attack Vectors in Go
Cesarano, C., Andersson, V., Natella, R., & Monperrus, M. (2023) · ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses (SCORED) · doi:10.1145/3689944.3696166
Proposal of Open Source Software Security Risk Indicator Based on Vulnerability Management Interview
Kuzuno, H., Yano, T., Omo, K., van der Ham, J., & Yamauchi, T. (2024) · Journal of Information Processing · doi:10.2197/ipsjjip.32.1090
Tamanna, M., Hamer, S., Tran, M., Fahl, S., Acar, Y., & Williams, L. A. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5119626
Plotting OSS-Based Supply Chain Attack Strategies and the Defense Failure
Sarang, A. D., Choi, S.-H., & Park, K.-W. (2025) · Lecture notes in computer science · doi:10.1007/978-981-96-1624-4_24
Security-by-Design at the Telco Edge with OSS: Challenges and Lessons Learned
Cesarano, C., Foggia, A., Roscigno, G., Andreani, L., & Natella, R. (2025) · IEEE/IFIP International Conference on Dependable Systems and Networks - Supplemental Volume (DSN-S) · doi:10.1109/dsn-s65789.2025.00041
Post-Quantum Software Updates with Stateful Hash-Based Signatures and The Update Framework
Romansky, B., Sarkani, S., & Mazzuchi, T. A. (2025) · IEEE Security & Privacy · doi:10.1109/msec.2025.3591244
Tool or Toy: Are SCA tools ready for challenging scenarios?
Shu, C., Chen, W., Fan, G., Yu, H., Huang, Z., & Liang, Y. (2025) · Computers & Security · doi:10.1016/j.cose.2025.104624
HyperBC: Hypergraph-Based Approach for Behavior Cluster of Suspicious APT Attacks
Du, W., Li, S., Li, G., & Li, J. (2025) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-031-94448-2_2
PyPitfall: Dependency Chaos and Software Supply Chain Vulnerabilities in Python
Mahon, J., Hou, C., & Yao, Z. (2025) · IEEE International Conference on Big Data (BigData) · doi:10.1109/bigdata66926.2025.11401557
Securing HHL Quantum Algorithm against Quantum Computer Attacks
Tan, Y. H., Kukina, H., & Szefer, J. M. (2025) · Hardware and Architectural Support for Security and Privacy · doi:10.1145/3768725.3768736 · Cited by 1
The design space of lockfiles across package managers
Gamage, Y., Tiwari, D., Monperrus, M., & Baudry, B. (2026) · Empirical Software Engineering · doi:10.1007/s10664-025-10789-w
Detection and Analysis of Poisoned Image in Container Registry
Pang, S., Wang, Y., Yao, Y., Jiang, Z., Fan, Z., & Liu, B. (2025) · Proceedings/Proceedings - International Symposium on Software Reliability Engineering · doi:10.1109/issre66568.2025.00051
Deprivileging Low-Level GPU Drivers Efficiently with User-Space Processes and CHERI Compartments
Metzger, P., Markettos, A. T., Napierala, E. T., Naylor, M. F., Watson, R. N. M., & Jones, T. M. (2025) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3719027.3765036
Supply-Chain-Aligned Software Auditing and Usage Justification via Distributed Ledgers
Stengele, O., Droll, J., & Hannes Hartenstein, B. (2025) · IEEE International Conference on Blockchain and Cryptocurrency (ICBC) · doi:10.1109/icbc64466.2025.11114608
Wang, W., Ding, Z., Chen, K., Shi, S., Zhang, W., Yang, Y., & Li, M. (2025) · International Conference on Electronic Information Technology (EIT) · doi:10.1109/eit67313.2025.11232238
RESEARCH OF METHODS AND TOOLS FOR IMPROVING GIT LFS PROTOCOL SECURITY
Havryliak, V. R. (2025) · Cybersecurity Education Science Technique · doi:10.28925/2663-4023.2025.31.1040
Artificial Intelligence and Machine Learning for Supply Chain Security
Razzaq, K., & Abbasi, S. I. (2026) · Signals and communication technology · doi:10.1007/978-3-032-11119-7_7 · Cited by 1
MalSkills: Detecting Malicious Skills in the Agentic Supply Chain via Neuro-symbolic Reasoning
Wang, S., He, J., Zhao, Y., Wang, Y., Yu, K., & Wang, H. (2026) · IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1145/3832783.3834375
Plate, H. (2024) · doi:10.70675/19d4cfb4za969z40a3z8c79z4060c26a7e44
Self-citationUnderstanding and preventing open-source software supply chain attacks
Ladisa, P. (2024) · theses.fr (ABES) · doi:10.70675/70265dd7z4bbdz41c2za9f2zbfed786b5894
Self-citationWang, W., Han, F., Zhao, S., Zhou, X., Qian, W., Zhou, A., Xia, X., Yang, L., Wang, R., Jiang, N., et al. (2026) · International World Wide Web Conference (WWW) · doi:10.1145/3774904.3792807
Enhancing Software Supply Chain Security Through Cryptographic Package Integrity Verification
Vinjam, S. (2026) · IEEE SoutheastCon · doi:10.1109/southeastcon63549.2026.11475986
Digital Twins for Security-Based Assurance of Edge-Cloud Software - a Data Platform Approach
Truong, H., & Nguyen, P. (2026) · IEEE International Conference on Software Architecture Companion (ICSA-C) · doi:10.1109/icsa-c68850.2026.00051
Act in Collusion: Distributed Multi-Target Backdoor Attacks in Federated Learning
Liu, T., Man, D., Lv, J., Xu, C., Xi, W., Wang, H., Zhang, Y., Zhao, T., & Yang, W. (2026) · IEEE Internet of Things Journal · doi:10.1109/jiot.2026.3686070
Papotti, A., Ponta, S. E., Sabetta, A., & Massacci, F. (2026) · Empirical Software Engineering · doi:10.1007/s10664-026-10860-0
SBOM-BASED VULNERABILITY PRIORITIZATION IN SOFTWARE SUPPLY CHAIN USING MACHINE LEARNING
SHTOMA, D., & Petrivskyi, V. (2025) · Advanced Information Technology · doi:10.17721/ait.2025.2.04
Gudimetla, S., Gangula, S., & Buhyavarapu, S. (2026) · IEEE International Conference on Communication Systems and Network Technologies (CSNT) · doi:10.1109/csnt69054.2026.11502139
Shape-Shifting Malicious Code in Software Backdoors via Language Models
Fard, M. E., Weißberg, F., Imgrund, E., Eisenhofer, T., & Rieck, K. (2026) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3779208.3807485
Revisiting the QUT-DV25 Benchmark: Interpretable Feature-Fused Models for PyPI Malware Detection
Wasi, S. R., & Hira, S. I. (2026) · IEEE International Conference on Quantum Photonics, Artificial Intelligence & Networking (QPAIN) · doi:10.1109/qpain69676.2026.11545547
Static Detection of Compromised Java Components by Topological Anomalies
de Paiva, O. Z., Ruggiero, W. V., & Junior, M. A. S. (2026) · Communications in computer and information science · doi:10.1007/978-3-032-28957-5_13
Panic! At The Distro: A Study of Malware Prevention in Linux DistributionsPreprint
Vu, D., Dunlap, T., Obermeier-Velazquez, K., Nguyen, T., Gibert, P., Meyers, J. S., & Torres-Arias, S. (2026) · SSRN Electronic Journal · doi:10.2139/ssrn.6981146
Panic! At The Distro: A Study of Malware Prevention in LinuxDistributionsPreprint
Vu, D., Dunlap, T., Obermeier-Velazquez, K., Nguyen, T., Gibert, P., Meyers, J. S., & Torres-Arias, S. (2026) · SSRN Electronic Journal · doi:10.2139/ssrn.6981145
Supply Chain Security of PCR Tests
Barkay, N., Motro, Y., Moran-Gilad, J., & Puzis, R. (2026) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw72489.2026.00012
Uncovering Similar but Different Packages in PyPI and Potential Security Threats
Park, S., Han, S., & Woo, S. (2026) · Proceedings of the ACM on software engineering. · doi:10.1145/3808217
The First Large-Scale Systematic Study of Python Class Pollution Vulnerability
Liu, Z., Zhong, J., Yu, J., Lyu, M., Kang, Z., & Cao, Y. (2026) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp63933.2026.00108
Tekin, S., Suciu, O., Kwag, S., Kwon, Y., & Dumitraş, T. (2026) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp63933.2026.00227
CHAINS - Collaborative Hub for Advancing Innovative and Sustainable Software Supply Chains
Sunyé, G., Eler, M. M., Cordeiro, D. D. A., Calvar, T. L., de Carvalho, V. R., de Amorim, F. K. G., & Morandini, M. (2026) · IEEE/ACM International Workshop on Green and Sustainable Software (GREENS) · doi:10.1145/3786148.3797897
Prevention and Dynamic Analysis of Supply Chain Attacks in Academic Python Environments
Sedov, D., Lazarev, A., & Galkin, A. G. (2026) · International Conference on Technology Enhanced Learning in Higher Education (TELE) · doi:10.1109/tele71748.2026.11591271
VCAligner: Aligning Source Distribution Versions with Upstream Git Commits to Secure Supply Chain
Li, Y., Jiang, N., Zhou, Q., Xu, S., Xie, Y., & Jia, X. (2026) · International Conference on Dependable Systems & Networks/Proceedings · doi:10.1109/dsn69566.2026.00048
Attestable Build Chain: Enabling Trust in Reproducible Builds
Muto, K., & Suzaki, K. (2026) · International Conference on Dependable Systems and Networks workshops · doi:10.1109/dsn-w70714.2026.00051
Tendikov, N., Lisnevskyi, R., & Rzayeva, L. (2026) · IEEE International Conference on Smart Information Systems and Technologies (SIST) · doi:10.1109/sist61674.2026.11596367
Understanding and Detecting GitHub Impersonation through Automated Authorship Attribution
Zhang, Y., Zhang, Y., Wisniewski, P., Zhang, F., Leach, K., & Huang, Y. (2026) · ACM Transactions on Software Engineering and Methodology · doi:10.1145/3830464
It’s Not Just Timestamps: A Study on Docker Reproducibility
Solarin, O. (2026) · ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE) · doi:10.1145/3803437.3804434
STĂNCIULESCU, A. (2026) · International Conference on Electronics, Computers and Artificial Intelligence (ECAI) · doi:10.1109/ecai69016.2026.11613644
SupplyTGN: A Reproducible Leakage-Safe Benchmark for Temporal Software Supply-Chain RiskPreprint
Tran-Truong, P. T., Son, H. X., & Le, X.-B. (2026) · SSRN Electronic Journal · doi:10.2139/ssrn.7194447
Huang, Z., Liu, C., Wang, Z., Cui, X., Deng, X., & Xu, M. (2026) · ACM Transactions on Software Engineering and Methodology · doi:10.1145/3830237
Stepping out of Bounds: Security Impact of Allowing Packages on npm to Declare External Dependencies
Tassio, D., Wyss, E., Salazar-Morales, G., Carli, L. D., & Davidson, D. (2025) · ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses (SCORED) · doi:10.1145/3733827.3765525
Guo, R., Hu, N., Ma, Y., Huang, Z., Peng, F., Li, G., & Wen, G. (2026) · Aerospace · doi:10.3390/aerospace13080683
Maven-Hijack: Software Supply Chain Attack Exploiting Packaging Order
Reyes, F., Bono, F., Sharma, A., Baudry, B., & Monperrus, M. (2025) · ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses (SCORED) · doi:10.1145/3733827.3765523
SoK: A Defense-Oriented Evaluation of Software Supply Chain Security
Ishgair, E. A., Gomez, J., Melara, M. S., Cárdenas, Á. A., & Torres-Arias, S. (2026) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp68448.2026.00059
Security Assessment of Private Package Repositories: An Experience on Acc‐Py at CERN
Lizzit, M., Pinzauti, F., Marino Miculan, A., & Riccio, V. (2026) · Journal of Software Evolution and Process · doi:10.1002/smr.70159
Securing the Software Supply Chain: Innovations and Approaches
Zarras, A., Haleplidis, E., Xenakis, C., & Fournaris, A. P. (2025) · Emerald Group Publishing Limited eBooks · doi:10.1561/978-1-63828-507-620251012
From Fake Job Offer to Full Environment Compromise: Anatomy of the Contagious Interview Campaign
Pitumpe, A., Podleski, J., Khanlari, A., Dziubecki, P., Muthukumaramani, D., & Rahmati, A. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-35586-7_17
SoK: Security Vulnerabilities in Agentic AI Systems
Guan, S., Kovalev, A., & Xie, L. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-35579-9_6
Bai, H., Zhang, J., Li, H., Fu, X., siya, A., & Hao, Y. (2026) · Journal of King Saud University - Computer and Information Sciences · doi:10.1007/s44443-026-01121-7
Bai, R., Lin, S., Liu, X., Fan, K., Lu, B., Lu, Y., & Wu, W. (2026) · Mathematics · doi:10.3390/math14183250
Urs, P. G., & Mureşan, V. (2026) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp6050158
Malicious Repository Detection Using Transformer-Based Models: A Metadata-Driven Approach
Mouty, R., & Abdullah-Al-Wadud, M. (2026) · IEEE Access · doi:10.1109/access.2026.3732697
Metadata Compressibility and Evaluation Bias in Malicious Package Detection for NPM and PyPI
Moufid, H., Ghazouani, M. E., & Kiram, M. A. E. (2026) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp6050160
IntelliRadar: A Comprehensive Platform to Pinpoint Malicious Packages from Cyber Intelligence
Guo, W., Liu, C., Wang, L., Zhang, Y., Wu, J., Xu, Z., & Liu, Y. (2026) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1145/3744916.3773113 · Cited by 5
Continuous Static Assurance and Symbolic Execution for Secure Software Supply Chains
Giapantzis, K., Zarras, A., Psychogyiou, K., & Xenakis, C. (2026) · IntechOpen eBooks · doi:10.5772/intechopen.1015225
Fighting Supply Chain Attacks with Effect Systems
Madsen, M., Larsen, A. S., Villumsen, J. S., & Askarov, A. (2026) · Proceedings of the ACM on Programming Languages · doi:10.1145/3839494
WITFuzz: Validity-Preserving Greybox Fuzzing for WebAssembly Interface Type Binding Generators
Guan, H., He, N., Cao, S., Cai, Y., Guo, Y., & Li, D. (2026) · Proceedings of the ACM on software engineering. · doi:10.1145/3832281
PackMonitor: Towards Zero Package Hallucinations via Decoding-Time Monitoring
Liu, X., Liu, Y., Zhang, Y., Li, J., & Hu, S. (2026) · Proceedings of the ACM on software engineering. · doi:10.1145/3832118 · Cited by 3
Tao, W., Zhen, W., Zhang, W., Daocheng, X., & Ren, X. (2026) · Automated Software Engineering · doi:10.1007/s10515-026-00678-x
Artifacts to Actors: Assessing the Maturity of Software Supply Chain Security Measurement Practices
Butler, A., O’Keeffe, D., & Dash, S. K. (2026) · doi:10.1145/3843781.3844628
Seeing the Forest: A Taxonomy-Guided Analysis and Improvement of Malicious PyPI Package Detectors
Liu, Z., Wang, J., & Chen, S. (2026) · doi:10.1145/3844178.3844648
Reachability Is Only the Beginning: Toward Effect-Aware Vulnerability Analysis for AI Agents
Ji, Y., Wei, Y., Wu, Y., & Zou, D. (2026) · doi:10.1145/3844178.3844644
S2CAgent: A Self-Learning Agent Knowledge Graph Framework for Software Supply Chain Analysis
Huang, Y., Li, Z., Pan, M., & Li, X. (2026) · IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1145/3832783.3837513
Metadata
- Authors
- Ladisa, P., Plate, H., Martinez, M., & Barais, O.
- Affiliations
- Systems, Applications & Products in Data Processing (Switzerland) (CH)
- Université Polytechnique Hauts-de-France
- Institut national de recherche en sciences et technologies du numérique (FR)
- Venue
- 2023 IEEE Symposium on Security and Privacy (SP)
- Publisher
- IEEE
- Published
- 2023-05
- Pages
- 1509-1526
- ISSN
- 1081-6011 (ISSN-L)
- OpenAlex
- W4385208592
- Cited by
- 208
- References
- 94
- Citations by year
- 2026: 65 · 2025: 63 · 2024: 46 · 2023: 32
- FWCI
- 52.94
- Type
- conference paper
- Language
- en
- Open access
- green
- inria.hal.science
- Locations
- IEEE Symposium on Security and Privacy (S&P) (publishedVersion)
- HAL (submittedVersion, cc-by)
- Topics
- Physical Sciences › Computer Science › Information Systems › Software Engineering Research
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Information Systems › Web Application Security Vulnerabilities
- Keywords
- attack taxonomy, supply chain attacks, malicious code injection, attack trees, software supply chain security, security measures, developer survey, attack vectors
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
