CHASE: LLM Agents for Dissecting Malicious PyPI Packages

Takaaki Toda, Tatsuya Mori

Modern software package registries like PyPI have become critical infrastructure for software development, but are increasingly exploited by threat actors distributing malicious pa…