How Effective Are NPM Malicious Package Detectors? A Large-Scale Empirical Study

Wenbo Guo, Zhongwen Chen, Zhengzi Xu +7

The NPM ecosystem faces escalating threats from malicious packages that exploit its open publication model. While numerous detection tools have been proposed, they are evaluated on…