Imagen de Portada

Understanding NPM Malicious Package Detection: A Benchmark-Driven Empirical Analysis

Fuente: arXiv

Guardado en:

Detalles Bibliográficos
Autores principales:	Guo, Wenbo, Chen, Zhongwen, Xu, Zhengzi, Liu, Chengwei, Kang, Ming, Song, Shiwen, Liu, Chengyue, Xu, Yijia, Sun, Weisong, Liu, Yang
Formato:	Preprint
Publicado:	2026
Materias:	Software Engineering
Acceso en línea:	Acceder al recurso
Etiquetas:	Agregar Etiqueta Sin Etiquetas, Sea el primero en etiquetar este registro!

Ejemplares similares

Bridging Expert Reasoning and LLM Detection: A Knowledge-Driven Framework for Malicious Packages
por: Guo, Wenbo, et al.
Publicado: (2026)

Cutting the Gordian Knot: Detecting Malicious PyPI Packages via a Knowledge-Mining Framework
por: Guo, Wenbo, et al.
Publicado: (2026)

IntelliRadar: A Comprehensive Platform to Pinpoint Malicious Package Information from Cyber Intelligence
por: Guo, Wenbo, et al.
Publicado: (2024)

Uncovering and Mitigating the Impact of Frozen Package Versions for Fixed-Release Linux
por: Tang, Wei, et al.
Publicado: (2024)

Drop the Golden Apples: Identifying Third-Party Reuse by DB-Less Software Composition Analysis
por: Zhang, Lyuye, et al.
Publicado: (2025)

ModuleGuard:Understanding and Detecting Module Conflicts in Python Ecosystem
por: Zhu, Ruofan, et al.
Publicado: (2024)

Doctor: Optimizing Container Rebuild Efficiency by Instruction Re-Orchestration
por: Zhu, Zhiling, et al.
Publicado: (2025)

Detecting and Characterizing Low and No Functionality Packages in the NPM Ecosystem
por: Tevarut, Napasorn, et al.
Publicado: (2025)

Killing Two Birds with One Stone: Malicious Package Detection in NPM and PyPI using a Single Model of Malicious Behavior Sequence
por: Zhang, Junan, et al.
Publicado: (2023)

JC-Finder: Detecting Java Clone-based Third-Party Library by Class-level Tree Analysis
por: Zhao, Lida, et al.
Publicado: (2025)

Empirical Analysis of Vulnerabilities Life Cycle in Golang Ecosystem
por: Hu, Jinchang, et al.
Publicado: (2023)

What About Our Bug? A Study on the Responsiveness of NPM Package Maintainers
por: Saeidi, Mohammadreza, et al.
Publicado: (2025)

An Analysis of Malicious Packages in Open-Source Software in the Wild
por: Zhou, Xiaoyan, et al.
Publicado: (2024)

Hallucination Detection for LLM-based Text-to-SQL Generation via Two-Stage Metamorphic Testing
por: Yang, Bo, et al.
Publicado: (2025)

A Machine Learning-Based Approach For Detecting Malicious PyPI Packages
por: Samaana, Haya, et al.
Publicado: (2024)

Towards Better Comprehension of Breaking Changes in the NPM Ecosystem
por: Kong, Dezhen, et al.
Publicado: (2024)

UCRBench: Benchmarking LLMs on Use Case Recovery
por: Xiao, Shuyuan, et al.
Publicado: (2025)

Scaling Test-Driven Code Generation from Functions to Classes: An Empirical Study
por: Liang, Yunhao, et al.
Publicado: (2026)

Requirements Development and Formalization for Reliable Code Generation: A Multi-Agent Vision
por: Lu, Xu, et al.
Publicado: (2025)

Detecting Malicious Source Code in PyPI Packages with LLMs: Does RAG Come in Handy?
por: Ibiyo, Motunrayo, et al.
Publicado: (2025)

Evolaris: A Roadmap to Self-Evolving Software Intelligence Management
por: Liu, Chengwei, et al.
Publicado: (2025)

GPTScan: Detecting Logic Vulnerabilities in Smart Contracts by Combining GPT with Program Analysis
por: Sun, Yuqiang, et al.
Publicado: (2023)

Enhancing and Reporting Robustness Boundary of Neural Code Models for Intelligent Code Understanding
por: Han, Tingxu, et al.
Publicado: (2026)

Enhancing Function Name Prediction using Votes-Based Name Tokenization and Multi-Task Learning
por: Zhang, Xiaoling, et al.
Publicado: (2024)

Many Hands Make Light Work: An LLM-based Multi-Agent System for Detecting Malicious PyPI Packages
por: Zeshan, Muhammad Umar, et al.
Publicado: (2026)

iReDev: A Knowledge-Driven Multi-Agent Framework for Intelligent Requirements Development
por: Jin, Dongming, et al.
Publicado: (2025)

Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study
por: Liu, Yi, et al.
Publicado: (2023)

SkillClone: Multi-Modal Clone Detection and Clone Propagation Analysis in the Agent Skill Ecosystem
por: Zhu, Jiaying, et al.
Publicado: (2026)

An Empirical Study of Vulnerable Package Dependencies in LLM Repositories
por: Liu, Shuhan, et al.
Publicado: (2025)

CHASE: LLM Agents for Dissecting Malicious PyPI Packages
por: Toda, Takaaki, et al.
Publicado: (2026)

Knowledge-Based Multi-Agent Framework for Automated Software Architecture Design
por: Zhang, Yiran, et al.
Publicado: (2025)

An Empirical Study of Vulnerability Detection using Federated Learning
por: Zhou, Peiheng, et al.
Publicado: (2024)

Promptware Engineering: Software Engineering for Prompt-Enabled Systems
por: Chen, Zhenpeng, et al.
Publicado: (2025)

TIGER: A Generating-Then-Ranking Framework for Practical Python Type Inference
por: Wang, Chong, et al.
Publicado: (2024)

An Empirical Study on Noisy Label Learning for Program Understanding
por: Wang, Wenhan, et al.
Publicado: (2023)

Mind the Gap: Evaluating LLMs for High-Level Malicious Package Detection vs. Fine-Grained Indicator Identification
por: Ryan, Ahmed, et al.
Publicado: (2026)

DySec: A Machine Learning-based Dynamic Analysis for Detecting Malicious Packages in PyPI Ecosystem
por: Mehedi, Sk Tanzir, et al.
Publicado: (2025)

An Empirical Study of Speculative Decoding on Software Engineering Tasks
por: Li, Yijia, et al.
Publicado: (2026)

An Empirical Study on Package-Level Deprecation in Python Ecosystem
por: Zhong, Zhiqing, et al.
Publicado: (2024)

An Interactive Empirical Approach to the Validation of Software Package Specifications
por: Fraser, S. D., et al.
Publicado: (2024)