Concepedia

Malicious Package Detection

Malicious Package Detection is a software security analysis technique that identifies npm packages containing intentionally harmful code by analyzing behavioral, syntactic, or provenance-based indicators distinct from benign or vulnerable packages.

22

Publications

860

Citations

61

Authors

26

Institutions

Publications per year

2017–2026

21

Parents

Publications

22

Small World with High Risks: A Study of Security Threats in the npm Ecosystem

Markus Zimmermann, Cristian-Alexandru Staicu, Cam Tenny et al. · arXiv (Cornell University) · 2019 · 89 citations · Full text

, , +13

Empirical analysis of security vulnerabilities in Python packages

Mahmoud Alfadel, Diego Elias Costa, Emad Shihab · Empirical Software Engineering · 2023 · 72 citations

, , +16

Empirical Analysis of Security Vulnerabilities in Python Packages

Mahmoud Alfadel, Diego Elias Costa, Emad Shihab · 2021 · 69 citations

, , +16

Practical automated detection of malicious npm packages

Adriana Sejfia, Max Schäfer · Proceedings of the 44th International Conference on Software Engineering · 2022 · 67 citations · Full text

, , +13

Towards detection of software supply chain attacks by forensic artifacts

Marc Ohm, Arnold Sykosch, Michael Meier · 2020 · 56 citations

, , +13

1–5 of 22

Authors

61

  1. DV
    Duc‐Ly Vu

    University of Trento, Italy

    4 publications · 176 citations

    4

    h-index

  2. FM
    Fabio Massacci

    University of Trento, Italy

    4 publications · 176 citations

    4

    h-index

  3. IP
    Ivan Pashchenko

    University of Trento, Italy

    3 publications · 150 citations

    3

    h-index

  4. AS
    Antonino Sabetta

    University of Trento, Italy

    3 publications · 150 citations

    3

    h-index

  5. MO
    Marc Ohm

    University of Bonn, Germany

    3 publications · 102 citations

    3

    h-index

1–5 of 61

Institutions

26

  1. University of Trento

    Trento, Italy

    4 h-index

    12 publications

    528 citations

  2. University of Bonn

    Bonn, Germany

    3 h-index

    9 publications

    314 citations

  3. Concordia University

    Montreal, Canada

    2 h-index

    5 publications

    351 citations

  4. Vrije Universiteit Amsterdam

    Amsterdam, The Netherlands

    2 h-index

    2 publications

    71 citations

  5. Technische Universität Darmstadt

    Darmstadt, Germany

    2 h-index

    6 publications

    369 citations

  6. Fraunhofer Institute for Communication, Information Processing and Ergonomics

    Wachtberg, Germany

    2 h-index

    2 publications

    46 citations

  7. Nanyang Technological University

    Singapore, Singapore

    1 h-index

    3 publications

    96 citations

  8. Indraprastha Institute of Information Technology Delhi

    Delhi, India

    1 h-index

    2 publications

    52 citations

1–8 of 26

Venues

  1. 2

    h-index

  2. arXiv (Cornell University)

    Repository · 2 publications · 107 citations

    2

    h-index

  3. Social Network Analysis and Mining

    1 publications · 26 citations

    1

    h-index

  4. IEEE Transactions on Mobile Computing

    TMCCI · 1 publications · 12 citations

    1

    h-index

  5. 1

    h-index

1–5