Open access
Aug 2026
PDCG-RuleDetector: parameterized data-flow call graphs meet large language models for malicious NPM package detection
The PDCG-RuleDetector framework is validated on widely used datasets and shows good generalization capability, and during 10 days of real-world deployment, the framework identified 152 malicious packages among 107,802 newly published NPM packages.
He Bai, Jia-Qi Zhang, Honghui Li et al.
· Journal of King Saud Univers... · 0 citations