3 papers
cs.CR2026
From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers
Yiheng Huang, Zhijia Zhao, Bihuan Chen +5
The model context protocol (MCP) standardizes how LLMs connect to external tools and data sources, enabling faster integration but introducing new attack vectors. Despite the growi…
cs.SE2026
Bridging Generation and Training: A Systematic Review of Quality Issues in LLMs for Code
Kaifeng He, Xiaojun Zhang, Peiliang Cai +7
Large language models (LLMs) frequently generate defective outputs in code generation tasks, ranging from logical bugs to security vulnerabilities. While these generation failures…
cs.CR2025
Killing Two Birds with One Stone: Malicious Package Detection in NPM and PyPI using a Single Model of Malicious Behavior Sequence
Junan Zhang, Kaifeng Huang, Yiheng Huang +4
Open-source software (OSS) supply chain enlarges the attack surface, which makes package registries attractive targets for attacks. Recently, package registries NPM and PyPI have b…