3 papers
cs.CR2025
An Analysis of Malicious Packages in Open-Source Software in the Wild
Xiaoyan Zhou, Ying Zhang, Wenjia Niu +3
The open-source software (OSS) ecosystem suffers from security threats caused by malware.However, OSS malware research has three limitations: a lack of high-quality datasets, a lac…
cs.CR2024
Tactics, Techniques, and Procedures (TTPs) in Interpreted Malware: A Zero-Shot Generation with Large Language Models
Ying Zhang, Xiaoyan Zhou, Hui Wen +4
Nowadays, the open-source software (OSS) ecosystem suffers from security threats of software supply chain (SSC) attacks. Interpreted OSS malware plays a vital role in SSC attacks,…
cs.SE2024
A Large-scale Fine-grained Analysis of Packages in Open-Source Software Ecosystems
Xiaoyan Zhou, Feiran Liang, Zhaojie Xie +5
Package managers such as NPM, Maven, and PyPI play a pivotal role in open-source software (OSS) ecosystems, streamlining the distribution and management of various freely available…