Motivation-achievement cycles in learning: A literature review and research agenda

TV Vu, L Magis-Weinberg, BRJ Jansen… - Educational Psychology …, 2022 - Springer
The question of how learners' motivation influences their academic achievement and vice
versa has been the subject of intensive research due to its theoretical relevance and …

Backstabber's knife collection: A review of open source software supply chain attacks

M Ohm, H Plate, A Sykosch, M Meier - … 2020, Lisbon, Portugal, June 24–26 …, 2020 - Springer
A software supply chain attack is characterized by the injection of malicious code into a
software package in order to compromise dependent systems further down the chain …

Sok: Taxonomy of attacks on open-source software supply chains

P Ladisa, H Plate, M Martinez… - 2023 IEEE Symposium …, 2023 - ieeexplore.ieee.org
The widespread dependency on open-source software makes it a fruitful target for malicious
actors, as demonstrated by recurring attacks. The complexity of today's open-source supply …

What are weak links in the npm supply chain?

N Zahan, T Zimmermann, P Godefroid… - Proceedings of the 44th …, 2022 - dl.acm.org
Modern software development frequently uses third-party packages, raising the concern of
supply chain security attacks. Many attackers target popular package managers, like npm …

[PDF][PDF] Towards measuring supply chain attacks on package managers for interpreted languages

R Duan, O Alrawi, RP Kasturi, R Elder… - ar**
C Huang, N Wang, Z Wang, S Sun, L Li… - 33rd USENIX Security …, 2024 - usenix.org
With the growing popularity of modularity in software development comes the rise of
package managers and language ecosystems. Among them, npm stands out as the most …

Lastpymile: identifying the discrepancy between sources and packages

DL Vu, F Massacci, I Pashchenko, H Plate… - Proceedings of the 29th …, 2021 - dl.acm.org
Open source packages have source code available on repositories for inspection (eg on
GitHub) but developers use pre-built packages directly from the package repositories (such …

Taxonomy of attacks on open-source software supply chains

P Ladisa, H Plate, M Martinez, O Barais - arxiv preprint arxiv:2204.04008, 2022 - arxiv.org
The widespread dependency on open-source software makes it a fruitful target for malicious
actors, as demonstrated by recurring attacks. The complexity of today's open-source supply …

Towards using source code repositories to identify software supply chain attacks

DL Vu, I Pashchenko, F Massacci, H Plate… - Proceedings of the 2020 …, 2020 - dl.acm.org
Increasing popularity of third-party package repositories, like NPM, PyPI, or RubyGems,
makes them an attractive target for software supply chain attacks. By injecting malicious …