On the Feasibility of Cross-Language Detection of Malicious Packages in npm and PyPI-Reference-Cited by-同舟云学术

On the Feasibility of Cross-Language Detection of Malicious Packages in npm and PyPI

Published:2023-12-04 Issue: Volume: Page:
ISSN:
Container-title:Annual Computer Security Applications Conference
language:
Short-container-title:

Author:

Ladisa Piergiorgio¹^ORCID,Ponta Serena Elisa²^ORCID,Ronzoni Nicola²^ORCID,Martinez Matias³^ORCID,Barais Olivier⁴^ORCID

Affiliation:

1. SAP Security Research, Université de Rennes, INRIA, IRISA, France

2. SAP Security Research, France

3. Universitat Politècnica de Catalunya-BarcelonaTech, Spain

4. Université de Rennes, Inria, CNRS, IRISA, France

Funder

AssureMOSS

Sec4AI4Sec

Publisher

ACM

Reference37 articles.

1. [n. d.]. 1. An Introduction to Distutils. https://docs.python.org/3/distutils/introduction.html. [Accessed 02-Dec-2022]. [n. d.]. 1. An Introduction to Distutils. https://docs.python.org/3/distutils/introduction.html. [Accessed 02-Dec-2022].

2. [n. d.]. Backstabber’s Knife Collection. https://dasfreak.github.io/Backstabbers-Knife-Collection/. [Accessed 07-Sep-2022]. [n. d.]. Backstabber’s Knife Collection. https://dasfreak.github.io/Backstabbers-Knife-Collection/. [Accessed 07-Sep-2022].

3. [n. d.]. Gems with Extensions. https://guides.rubygems.org/gems-with-extensions. [Accessed 30-Jun-2023]. [n. d.]. Gems with Extensions. https://guides.rubygems.org/gems-with-extensions. [Accessed 30-Jun-2023].

4. [n. d.]. Octoverse 2022: The state of open source. https://octoverse.github.com/. [Accessed 22-Nov-2022]. [n. d.]. Octoverse 2022: The state of open source. https://octoverse.github.com/. [Accessed 22-Nov-2022].

5. [n. d.]. package.json - npm Docs. https://docs.npmjs.com/cli/v8/configuring-npm/package-json#scripts. [Accessed 02-Dec-2022]. [n. d.]. package.json - npm Docs. https://docs.npmjs.com/cli/v8/configuring-npm/package-json#scripts. [Accessed 02-Dec-2022].

Cited by 1 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Maltracker: A Fine-Grained NPM Malware Tracker Copiloted by LLM-Enhanced Dataset;Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis;2024-09-11