22 citations
- National University of SingaporeSG6 papers
- Nanyang Technological UniversitySG5 papers
- Sichuan UniversityCN2 papers
- Singapore Management UniversitySG2 papers
- Agency for Science, Technology and ResearchSG1 paper
- Beijing Biocytogen (China)CN1 paper
- Centre d’Élaboration de Matériaux et d’Études StructuralesFR1 paper
- Centre National de la Recherche ScientifiqueFR1 paper
- Chinese Academy of SciencesCN1 paper
- Chinese University of Hong Kong, ShenzhenCN1 paper
- Data Storage InstituteSG1 paper
- Duke-NUS Medical SchoolSG1 paper
Showing cs.SEShow all
2 papers · 1 filter
cs.SE2026
How Effective Are NPM Malicious Package Detectors? A Large-Scale Empirical Study
Wenbo Guo, Zhongwen Chen, Zhengzi Xu +7
The NPM ecosystem faces escalating threats from malicious packages that exploit its open publication model. While numerous detection tools have been proposed, they are evaluated on…
cs.SE2026★ 1 cited
Bridging Expert Reasoning and LLM Detection: A Knowledge-Driven Framework for Malicious Packages
Wenbo Guo, Shiwen Song, Jiaxun Guo +5
Open-source ecosystems such as NPM and PyPI are increasingly targeted by supply chain attacks, yet existing detection methods either depend on fragile handcrafted rules or data-dri…