activity
20232026
most citedKilling Two Birds with One Stone: Malicious Package Detection in NPM and PyPI using a Single Model of Malicious Behavior Sequence

25 citations · 26 across the 6 of their papers we have counts for

collaborators
Showing 2026Show all

5 papers · 1 filter

cs.AI2026

: Guiding Agent Evolution from Pattern Recognition to Solution Invention

Wenyin Liu, Yiheng Huang, Kai Wang

We propose (TRIZ exponentiated by an agent), a general R\&D automation paradigm that combines TRIZ inventive theory with LLM-driven agent evolutionary search. T…

cs.SE2026

ProfMalPlus: Agent-Coordinated Detection of Malicious NPM Packages via Static-Dynamic Analysis Synergy

Yiheng Huang, Zhijia Zhao, Bihuan Chen +6

Open source software is vulnerable to supply-chain attacks through transitive dependencies, especially malicious code injected into NPM packages. Existing detectors often inadequat…

cs.CR2026

Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions

Yang Shi, Jiaheng Fu, Yihe Huang +3

Large language models (LLMs) are increasingly deployed as autonomous agents that interact with external tools and services via the Model Context Protocol (MCP), a standardized inte…

cs.CR2026

From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers

Yiheng Huang, Zhijia Zhao, Bihuan Chen +5

The model context protocol (MCP) standardizes how LLMs connect to external tools and data sources, enabling faster integration but introducing new attack vectors. Despite the growi…

cs.SE2026

VulWeaver: Weaving Broken Semantics for Grounded Vulnerability Detection

Yiheng Cao, Yihao Chen, Xin Hu +9

Detecting vulnerabilities in source code remains critical yet challenging, as conventional static analysis tools construct inaccurate program representations, while existing LLM-ba…