{"id":"https://openalex.org/W4411337043","doi":"https://doi.org/10.1109/tifs.2025.3580336","title":"MalPacDetector: An LLM-Based Malicious NPM Package Detector","display_name":"MalPacDetector: An LLM-Based Malicious NPM Package Detector","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4411337043","doi":"https://doi.org/10.1109/tifs.2025.3580336"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3580336","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3580336","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/tifs.2025.3580336","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Jian Wang","orcid":"https://orcid.org/0009-0003-9581-919X"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian Wang","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Jinyinhu Laboratory, Huazhong University of Science and Technology, Wuhan, China","School of Cyber Science and Engineering, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, Huazhong University of Science and Technology, JinYinHu Laboratory, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0003-9581-919X","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Jinyinhu Laboratory, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, Huazhong University of Science and Technology, JinYinHu Laboratory, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100332568","display_name":"Zhen Li","orcid":"https://orcid.org/0000-0002-0001-2998"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhen Li","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Jinyinhu Laboratory, Huazhong University of Science and Technology, Wuhan, China","School of Cyber Science and Engineering, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, Huazhong University of Science and Technology, JinYinHu Laboratory, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-0001-2998","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Jinyinhu Laboratory, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, Huazhong University of Science and Technology, JinYinHu Laboratory, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026703959","display_name":"Jun\u2010e Qu","orcid":"https://orcid.org/0000-0002-9128-3725"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jixiang Qu","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Jinyinhu Laboratory, Huazhong University of Science and Technology, Wuhan, China","School of Cyber Science and Engineering, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, Huazhong University of Science and Technology, JinYinHu Laboratory, Wuhan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Jinyinhu Laboratory, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, Huazhong University of Science and Technology, JinYinHu Laboratory, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074676946","display_name":"Deqing Zou","orcid":"https://orcid.org/0000-0001-8534-5048"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Deqing Zou","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Jinyinhu Laboratory, Huazhong University of Science and Technology, Wuhan, China","School of Cyber Science and Engineering, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, Huazhong University of Science and Technology, JinYinHu Laboratory, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0001-8534-5048","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, School of Cyber Science and Engineering, Jinyinhu Laboratory, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Hubei Key Laboratory of Distributed System Security, Hubei Engineering Research Center on Big Data Security, Huazhong University of Science and Technology, JinYinHu Laboratory, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019179799","display_name":"Shouhuai Xu","orcid":"https://orcid.org/0000-0001-8034-0942"},"institutions":[{"id":"https://openalex.org/I888729015","display_name":"University of Colorado Colorado Springs","ror":"https://ror.org/054spjc55","country_code":"US","type":"education","lineage":["https://openalex.org/I888729015"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shouhuai Xu","raw_affiliation_strings":["Department of Computer Science, Laboratory for Cybersecurity Dynamics, University of Colorado at Colorado Springs, Colorado Springs, CO, USA","University of Colorado Colorado Springs, Colorado Springs, USA"],"raw_orcid":"https://orcid.org/0000-0001-8034-0942","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Laboratory for Cybersecurity Dynamics, University of Colorado at Colorado Springs, Colorado Springs, CO, USA","institution_ids":["https://openalex.org/I888729015"]},{"raw_affiliation_string":"University of Colorado Colorado Springs, Colorado Springs, USA","institution_ids":["https://openalex.org/I888729015"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107889364","display_name":"Z. Xu","orcid":"https://orcid.org/0000-0001-9571-3131"},"institutions":[{"id":"https://openalex.org/I4210099297","display_name":"Jilian Technology Group (China)","ror":"https://ror.org/016q5ce10","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210099297"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziteng Xu","raw_affiliation_strings":["Ant Technology Group Company Ltd., Hangzhou, China","Ant Technology Group Co., Ltd, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Technology Group Company Ltd., Hangzhou, China","institution_ids":["https://openalex.org/I4210099297"]},{"raw_affiliation_string":"Ant Technology Group Co., Ltd, Hangzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhenwei Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210099297","display_name":"Jilian Technology Group (China)","ror":"https://ror.org/016q5ce10","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210099297"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenwei Wang","raw_affiliation_strings":["Ant Technology Group Company Ltd., Hangzhou, China","Ant Technology Group Co., Ltd, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Technology Group Company Ltd., Hangzhou, China","institution_ids":["https://openalex.org/I4210099297"]},{"raw_affiliation_string":"Ant Technology Group Co., Ltd, Hangzhou, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022262922","display_name":"Hai Jin","orcid":"https://orcid.org/0000-0002-3934-7605"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hai Jin","raw_affiliation_strings":["National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Cluster and Grid Computing Laboratory, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","Services Computing Technology and System Laboratory, Cluster and Grid Computing Laboratory, School of Computer Science and Technology, National Engineering Research Center for Big Data Technology and System, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-3934-7605","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Laboratory, Cluster and Grid Computing Laboratory, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"Services Computing Technology and System Laboratory, Cluster and Grid Computing Laboratory, School of Computer Science and Technology, National Engineering Research Center for Big Data Technology and System, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.7554,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.93513991,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"20","issue":null,"first_page":"6279","last_page":"6291"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9854999780654907,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9851999878883362,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8082675337791443},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.5607782006263733},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.14258509874343872}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8082675337791443},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.5607782006263733},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.14258509874343872}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3580336","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3580336","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tifs.2025.3580336","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3580336","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G716443104","display_name":null,"funder_award_id":"62272187","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W2169284845","https://openalex.org/W2953558274","https://openalex.org/W2973226110","https://openalex.org/W3021503072","https://openalex.org/W3046453918","https://openalex.org/W3081194266","https://openalex.org/W3109094705","https://openalex.org/W3138230581","https://openalex.org/W3196277935","https://openalex.org/W4226410005","https://openalex.org/W4226416841","https://openalex.org/W4293370349","https://openalex.org/W4300165808","https://openalex.org/W4301163492","https://openalex.org/W4310494058","https://openalex.org/W4318562265","https://openalex.org/W4385208592","https://openalex.org/W4385325051","https://openalex.org/W4388502409","https://openalex.org/W4402457704","https://openalex.org/W4404711543","https://openalex.org/W6759246942","https://openalex.org/W6783996346","https://openalex.org/W6790925587","https://openalex.org/W6791545668","https://openalex.org/W6846274582","https://openalex.org/W6862514700","https://openalex.org/W6881698489"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W2366906938"],"abstract_inverted_index":{"The":[0,122],"Node":[1],"Package":[2,62],"Manager":[3],"(NPM)":[4],"registry":[5],"contains":[6],"millions":[7],"of":[8,31,89,105,112,119,137,145],"JavaScript":[9],"packages":[10],"widely":[11],"shared":[12],"between":[13],"worldwide":[14],"developers.":[15],"However,":[16],"NPM":[17,34,38,61,98,162],"has":[18],"also":[19],"been":[20],"abused":[21],"by":[22,131,160],"attackers":[23],"to":[24,71,81],"spread":[25],"malicious":[26,33,37,120,155],"packages,":[27,156],"highlighting":[28],"the":[29,87,103,161],"importance":[30],"detecting":[32],"packages.":[35],"Existing":[36],"package":[39,99],"detectors":[40,130],"suffer":[41],"from,":[42],"among":[43],"other":[44],"things,":[45],"high":[46,50,116],"false":[47,51,134,142],"positives":[48],"and/or":[49],"negatives.":[52],"In":[53,148],"this":[54],"paper,":[55],"we":[56,94],"propose":[57],"a":[58,96,109,115,133,141],"novel":[59],"Malicious":[60],"Detector":[63],"(MalPacDetector),":[64],"which":[65,101,157],"leverages":[66],"Large":[67],"Language":[68],"Model":[69],"(LLM)":[70],"automatically":[72],"and":[73,91,114,140],"dynamically":[74],"generate":[75],"features":[76],"(rather":[77],"than":[78],"asking":[79],"experts":[80],"manually":[82],"define":[83],"them).":[84],"To":[85],"evaluate":[86],"effectiveness":[88],"Mal-PacDetector":[90],"existing":[92,106,129],"detectors,":[93],"construct":[95],"new":[97],"dataset,":[100],"overcomes":[102],"weaknesses":[104],"datasets":[107],"(e.g.,":[108],"small":[110],"number":[111],"examples":[113],"repetition":[117],"rate":[118,136,144],"fragments).":[121],"experimental":[123],"results":[124],"show":[125],"that":[126],"MalPacDetector":[127,150],"outperforms":[128],"achieving":[132],"positive":[135],"1.":[138],"3%":[139],"negative":[143],"7.":[146],"5%.":[147],"particular,":[149],"detects":[151],"39":[152],"previously":[153],"unknown":[154],"are":[158],"confirmed":[159],"security":[163],"team.":[164]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}