PYPILINE: Malicious PyPI Package Detection via Suspicious API Knowledge and Agent Workflow

Siyuan Pang, Yepeng Yao, Zhengwei Jiang +3

Detecting malicious PyPI packages is crucial for maintaining the security of the open source software supply chain. Traditional static rule detection methods require continuous mai…