{"id":"https://openalex.org/W7165109996","doi":"https://doi.org/10.48550/arxiv.2606.19063","title":"PYPILINE: Malicious PyPI Package Detection via Suspicious API Knowledge and Agent Workflow","display_name":"PYPILINE: Malicious PyPI Package Detection via Suspicious API Knowledge and Agent Workflow","publication_year":2026,"publication_date":"2026-06-17","ids":{"openalex":"https://openalex.org/W7165109996","doi":"https://doi.org/10.48550/arxiv.2606.19063"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.19063","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.19063","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.19063","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5112399485","display_name":"Siyuan Pang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pang, Siyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Yao, Yepeng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yao, Yepeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138943736","display_name":"Zhengwei Jiang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiang, Zhengwei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044920156","display_name":"Zijing Fan","orcid":"https://orcid.org/0009-0008-3192-9919"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fan, Zijing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016654419","display_name":"Haozhe Li","orcid":"https://orcid.org/0000-0001-7609-9025"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Haozhe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138945234","display_name":"Baoxu Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Baoxu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.7229999899864197,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.7229999899864197,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.04470000043511391,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.04259999841451645,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.7480999827384949},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.7034000158309937},{"id":"https://openalex.org/keywords/knowledge-base","display_name":"Knowledge base","score":0.5493999719619751},{"id":"https://openalex.org/keywords/precision-and-recall","display_name":"Precision and recall","score":0.5389999747276306},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.44920000433921814},{"id":"https://openalex.org/keywords/syntax","display_name":"Syntax","score":0.40959998965263367},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.38600000739097595},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.329800009727478},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.3257000148296356}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8658999800682068},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.7480999827384949},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.7034000158309937},{"id":"https://openalex.org/C4554734","wikidata":"https://www.wikidata.org/wiki/Q593744","display_name":"Knowledge base","level":2,"score":0.5493999719619751},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.5389999747276306},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.44920000433921814},{"id":"https://openalex.org/C60048249","wikidata":"https://www.wikidata.org/wiki/Q37437","display_name":"Syntax","level":2,"score":0.40959998965263367},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.38600000739097595},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.36489999294281006},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3483000099658966},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3467000126838684},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.329800009727478},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.3257000148296356},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.32269999384880066},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3215000033378601},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.29840001463890076},{"id":"https://openalex.org/C74072328","wikidata":"https://www.wikidata.org/wiki/Q1142726","display_name":"Intelligent agent","level":2,"score":0.2924000024795532},{"id":"https://openalex.org/C2129575","wikidata":"https://www.wikidata.org/wiki/Q54837","display_name":"Semantic Web","level":2,"score":0.2913999855518341},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.28529998660087585},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.2800999879837036},{"id":"https://openalex.org/C5894958","wikidata":"https://www.wikidata.org/wiki/Q2297769","display_name":"Software agent","level":2,"score":0.2784999907016754},{"id":"https://openalex.org/C42058472","wikidata":"https://www.wikidata.org/wiki/Q810214","display_name":"Base (topology)","level":2,"score":0.27649998664855957},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.2757999897003174},{"id":"https://openalex.org/C120567893","wikidata":"https://www.wikidata.org/wiki/Q1582085","display_name":"Knowledge extraction","level":2,"score":0.26899999380111694},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.266400009393692},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.2596000134944916},{"id":"https://openalex.org/C115925183","wikidata":"https://www.wikidata.org/wiki/Q1412694","display_name":"Knowledge-based systems","level":2,"score":0.2587999999523163},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.25529998540878296}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.19063","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.19063","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.19063","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.19063","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Detecting":[0],"malicious":[1,49,105],"PyPI":[2],"packages":[3],"is":[4,125,184],"crucial":[5],"for":[6],"maintaining":[7],"the":[8,11,41,67,130,151,160,228,244,247],"security":[9,27,245],"of":[10,40,48,150,172,175,180,208,219,246],"open":[12,248],"source":[13,249],"software":[14,250],"supply":[15],"chain.":[16],"Traditional":[17],"static":[18,101],"rule":[19],"detection":[20,59,68,86,241],"methods":[21,36,65],"require":[22,37],"continuous":[23],"maintenance":[24],"by":[25,186],"experienced":[26],"personnel,":[28],"resulting":[29,75],"in":[30,76],"high":[31],"labor":[32],"costs.":[33],"Dynamic":[34],"analysis":[35,102,149],"actual":[38],"execution":[39],"target":[42],"package":[43,204,240],"code,":[44],"posing":[45],"a":[46,84,119,163,202,214],"risk":[47],"code":[50],"proliferation,":[51],"and":[52,57,63,95,111,127,157,177,227,238],"incurring":[53],"significant":[54],"runtime":[55],"overhead":[56],"low":[58],"efficiency.":[60],"Machine":[61],"learning":[62],"LLM":[64],"iterate":[66],"kernel":[69],"but":[70],"cannot":[71],"invoke":[72,138],"multiple":[73],"tools,":[74],"insufficient":[77],"automation.To":[78],"address":[79],"these":[80,117],"issues,":[81],"we":[82,212],"propose":[83],"novel":[85],"method":[87],"called":[88],"PYPILINE,":[89],"which":[90],"combines":[91],"suspicious":[92,121],"API":[93,113,122],"knowledge":[94,123,140],"agent":[96,131],"workflow.":[97],"PYPILINE":[98,133,169,233],"first":[99],"performs":[100],"on":[103],"known":[104],"packages,":[106,152,221],"extracting":[107],"abstract":[108],"syntax":[109],"trees":[110],"generating":[112],"call":[114],"graphs.":[115],"From":[116],"graphs,":[118],"structured":[120,154],"base":[124,141],"extracted":[126],"constructed.":[128],"In":[129],"workflow,":[132],"uses":[134],"RAG":[135],"technology":[136],"to":[137,142,162,188,193],"this":[139],"enhance":[143],"analytical":[144],"capabilities,":[145],"performing":[146],"in-depth":[147],"semantic":[148],"outputting":[153],"evaluation":[155],"reports,":[156],"automatically":[158],"sending":[159],"reports":[161],"mail":[164],"server.Experimental":[165],"results":[166],"show":[167],"that":[168],"achieves":[170],"precision":[171],"96.7\\%,":[173],"recall":[174],"99.6\\%,":[176],"F1":[178,182],"score":[179,183],"98.1\\%.":[181],"improved":[185],"5.7":[187],"21.6":[189],"percentage":[190],"points":[191],"compared":[192],"baseline":[194],"tools.":[195],"When":[196],"30":[197],"threads":[198],"execute":[199],"concurrently,":[200],"detecting":[201],"single":[203],"takes":[205],"an":[206,235],"average":[207],"only":[209],"0.6":[210],"seconds.Furthermore,":[211],"conducted":[213],"large":[215],"scale":[216],"empirical":[217],"study":[218],"malware":[220],"systematically":[222],"revealing":[223],"common":[224],"attack":[225],"strategies":[226],"most":[229],"frequently":[230],"abused":[231],"APIs.":[232],"provides":[234],"intelligent,":[236],"efficient,":[237],"automated":[239],"solution,":[242],"enhancing":[243],"ecosystem.":[251]},"counts_by_year":[],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2026-06-19T00:00:00"}