openalexZenodo (CERN European Organization for Nuclear Research)2026-07-25
Behavioral Provenance Detection of Malicious Python Packages using Graph Neural Networks
The increasing reliance on third-party packages from repositories such as Python Package Index (PyPI) and Node Package Manager (NPM) has introduced critical vulnerabilities in software supply chains. Traditional security approaches, including signature-based detection and trust e…