How Effective Are NPM Malicious Package Detectors? A Large-Scale Empirical Study
Open Access
- 7 October 2026
- conference paper
- Published by Association for Computing Machinery (ACM)
- p. 1651-1663
Abstract
No abstract availableThis publication has 35 references indexed in Scilit:
- ProfMal: Detecting Malicious NPM Packages by the Synergy between Static and Dynamic Analysis2025
- An Analysis of Malicious Packages in Open-Source Software in the Wild2025
- MalWuKong: Towards Fast, Accurate, and Multilingual Detection of Malicious Code Poisoning in OSS Supply Chains2023
- An Empirical Study of Malicious Code In PyPI Ecosystem2023
- Containing Malicious Package Updates in npm with a Lightweight Permission System2021
- Defending Against Package Typosquatting2020
- Typosquatting and Combosquatting Attacks on the Python Ecosystem2020
- Backstabber’s Knife Collection: A Review of Open Source Software Supply Chain Attacks2020
- On the impact of using trivial packages: an empirical case study on npm and PyPIEmpirical Software Engineering, 2020
- Detecting Suspicious Package Updates2019