CI-Guard: Static Analysis for Detecting Supply Chain Attacks in Package Managers
Abstract
This version extends the original preprint with improved methodology details,additional detection patterns, refined evaluation results, and minor corrections.The tool is evaluated on popular NPM and PyPI packages and demonstrates strongdetection performance with zero false positives. Source code: https://github.com/Otsmane-Ahmed/ci-supplychain-guard
Fields of Study & Subjects
Physical Unclonable Functions (PUFs) and Hardware Security
Blockchain Technology Applications and Security
Advanced Malware Detection Techniques
Publication details
- Journal / source
- Zenodo (CERN European Organization for Nuclear Research)
- Publication date
- 31 January 2026
- Language
- EN
- Document type
- Preprint