2 papers
cs.CR2026
DistillGuard: Malicious NPM Package Detection and API Attack Chain Analysis via Static Graph and LLM Distillation
Siyuan Pang, Yepeng Yao, Zhengwei Jiang +2
The Node.js ecosystem heavily relies on NPM packages, and software supply chain attacks targeting malicious NPM packages are rampant. Malicious code primarily triggers during packa…
cs.CR2026
PYPILINE: Malicious PyPI Package Detection via Suspicious API Knowledge and Agent Workflow
Siyuan Pang, Yepeng Yao, Zhengwei Jiang +3
Detecting malicious PyPI packages is crucial for maintaining the security of the open source software supply chain. Traditional static rule detection methods require continuous mai…