{"id":"https://openalex.org/W7140303887","doi":"https://doi.org/10.1109/tr.2026.3676895","title":"Snake in the Grass: A Hybrid Detection Method Targeting Malicious PyPI Packages","display_name":"Snake in the Grass: A Hybrid Detection Method Targeting Malicious PyPI Packages","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7140303887","doi":"https://doi.org/10.1109/tr.2026.3676895"},"language":null,"primary_location":{"id":"doi:10.1109/tr.2026.3676895","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tr.2026.3676895","pdf_url":null,"source":{"id":"https://openalex.org/S87725633","display_name":"IEEE Transactions on Reliability","issn_l":"0018-9529","issn":["0018-9529","1558-1721"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Reliability","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5130605695","display_name":"Cheng Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cheng Huang","raw_affiliation_strings":["School of Cyber Science and Engineering, Sichuan University, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0002-5871-946X","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China","institution_ids":["https://openalex.org/I24185976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5146612247","display_name":"Yutong Zeng","orcid":"https://orcid.org/0000-0002-4483-5427"},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yutong Zeng","raw_affiliation_strings":["School of Cyber Science and Engineering, Sichuan University, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0002-4483-5427","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China","institution_ids":["https://openalex.org/I24185976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087145001","display_name":"Genpei Liang","orcid":"https://orcid.org/0000-0002-8412-7695"},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Genpei Liang","raw_affiliation_strings":["School of Cyber Science and Engineering, Sichuan University, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0002-8412-7695","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China","institution_ids":["https://openalex.org/I24185976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109302437","display_name":"Zhen Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhen Yang","raw_affiliation_strings":["School of Cyber Science and Engineering, Sichuan University, Chengdu, China"],"raw_orcid":"https://orcid.org/0009-0008-5882-7322","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China","institution_ids":["https://openalex.org/I24185976"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5050730634","display_name":"Yutong Du","orcid":"https://orcid.org/0009-0009-9759-6130"},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yutong Du","raw_affiliation_strings":["School of Cyber Science and Engineering, Sichuan University, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0002-1509-704X","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China","institution_ids":["https://openalex.org/I24185976"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I24185976"],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":6.8323,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.95583694,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"75","issue":null,"first_page":"1540","last_page":"1553"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.6025000214576721,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.6025000214576721,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.08910000324249268,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.05310000106692314,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.5138999819755554},{"id":"https://openalex.org/keywords/reliability-theory","display_name":"Reliability theory","score":0.3287000060081482},{"id":"https://openalex.org/keywords/circuit-reliability","display_name":"Circuit reliability","score":0.2676999866962433},{"id":"https://openalex.org/keywords/probability-density-function","display_name":"Probability density function","score":0.2280000001192093}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6773999929428101},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.5138999819755554},{"id":"https://openalex.org/C201729545","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability theory","level":3,"score":0.3287000060081482},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3124000132083893},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.29989999532699585},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2870999872684479},{"id":"https://openalex.org/C24326235","wikidata":"https://www.wikidata.org/wiki/Q126095","display_name":"Electronic engineering","level":1,"score":0.26989999413490295},{"id":"https://openalex.org/C2778309119","wikidata":"https://www.wikidata.org/wiki/Q5121614","display_name":"Circuit reliability","level":4,"score":0.2676999866962433},{"id":"https://openalex.org/C197055811","wikidata":"https://www.wikidata.org/wiki/Q207522","display_name":"Probability density function","level":2,"score":0.2280000001192093},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.2176000028848648}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tr.2026.3676895","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tr.2026.3676895","pdf_url":null,"source":{"id":"https://openalex.org/S87725633","display_name":"IEEE Transactions on Reliability","issn_l":"0018-9529","issn":["0018-9529","1558-1721"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Reliability","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/2","display_name":"Zero hunger","score":0.4186192750930786}],"awards":[{"id":"https://openalex.org/G5496080866","display_name":null,"funder_award_id":"62472296","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W2296719434","https://openalex.org/W2740279154","https://openalex.org/W2953558274","https://openalex.org/W2954975888","https://openalex.org/W2973442392","https://openalex.org/W2980153788","https://openalex.org/W2997591727","https://openalex.org/W3004207920","https://openalex.org/W3046453918","https://openalex.org/W3086419524","https://openalex.org/W3094525800","https://openalex.org/W3114916308","https://openalex.org/W3120137300","https://openalex.org/W3124116687","https://openalex.org/W3138230581","https://openalex.org/W3161491624","https://openalex.org/W3195348753","https://openalex.org/W3207355325","https://openalex.org/W4205583230","https://openalex.org/W4226416841","https://openalex.org/W4241830954","https://openalex.org/W4247632680","https://openalex.org/W4281390800","https://openalex.org/W4379537790","https://openalex.org/W4384345699","https://openalex.org/W4384808064","https://openalex.org/W4385208592","https://openalex.org/W4387723777","https://openalex.org/W4388483305","https://openalex.org/W4388502409","https://openalex.org/W4388502419","https://openalex.org/W4407592327","https://openalex.org/W4408475620","https://openalex.org/W4413319152"],"related_works":[],"abstract_inverted_index":{"As":[0],"an":[1],"increasing":[2],"number":[3],"of":[4,21,33],"reusable":[5],"packages":[6,99,124,156],"are":[7,14],"available":[8,135],"in":[9,40],"software":[10,42],"development,":[11],"package":[12,70],"ecosystems":[13],"becoming":[15],"more":[16],"mature.":[17],"Python":[18,34,41],"is":[19],"one":[20],"the":[22,30,103,111,146],"most":[23],"popular":[24],"programming":[25],"languages":[26],"today.":[27],"PyPI,":[28],"as":[29,57],"primary":[31],"repository":[32,116],"packages,":[35,52,109],"serves":[36],"a":[37,66,93],"critical":[38],"role":[39],"development.":[43],"While":[44],"PyPI":[45,98],"enables":[46],"registered":[47],"users":[48],"to":[49,60,84,106,139,157],"publish":[50],"open-source":[51],"attackers":[53],"can":[54],"disguise":[55],"themselves":[56],"de":[58],"velopers":[59],"distribute":[61],"malicious":[62,68,87,126,155],"packages.":[63,88],"We":[64,120],"present":[65],"hybrid":[67],"python":[69],"detection":[71,79],"framework":[72],"named":[73],"PCPD,":[74,90],"which":[75],"combines":[76],"static":[77],"anomaly":[78],"and":[80,100,130,144,162],"dynamic":[81],"running":[82],"analysis":[83],"detect":[85],"lurking":[86],"Using":[89],"we":[91,149],"analyze":[92],"real-world":[94],"dataset":[95],"containing":[96],"414,880":[97],"successfully":[101],"narrow":[102],"inspection":[104],"scope":[105],"324":[107],"suspicious":[108],"reducing":[110],"manual":[112],"review":[113],"workload":[114],"for":[115,136],"managers":[117],"by":[118],"99.48%.":[119],"have":[121],"identified":[122],"121":[123],"with":[125],"behavior":[127],"using":[128],"PCPD":[129],"made":[131],"all":[132],"samples":[133],"publicly":[134],"security":[137],"researchers":[138],"help":[140],"mitigate":[141],"these":[142],"risks":[143],"protect":[145],"community.":[147],"Additionally,":[148],"discover":[150],"potential":[151],"factors":[152],"that":[153],"enable":[154],"evade":[158],"scrutiny":[159],"from":[160],"repositories":[161],"associated":[163],"threat":[164],"signals.":[165]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2026-03-26T00:00:00"}