#supply chain security
topicsupply chain security
3 papers · 1 filter
cs.CR2026
Don't Trust the AI Ecosystem: Analyzing Privacy Leakage in Compromised Open-Source Components
Jin-Seong Kim, Han-Ju Lee, Seok-Won Hong +4
The paper presents GradLock, a training-time injection attack that stealthily embeds private training data into model parameters, enabling near‑perfect reconstruction of the data f…
cs.CR2026
Not In My Git Yard: Catching Backdoors at Commit and Release Time
Dimitri Kokkonis, Michaël Marcozzi, Stefano Zacchiroli
The paper introduces Lily, a tool that automatically detects hidden backdoors in open‑source code during commit and release stages by combining CI‑compatible fuzzing with code‑chan…
cs.SE2026
ProfMalPlus: Agent-Coordinated Detection of Malicious NPM Packages via Static-Dynamic Analysis Synergy
Yiheng Huang, Zhijia Zhao, Bihuan Chen +6
The paper presents ProfMalPlus, a system that detects malicious NPM packages by combining object-sensitive behavior graphs with coordinated large language model reasoning over stat…