{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:4E2KD5DVJ2TJAQIW7BHUXHP7FU","short_pith_number":"pith:4E2KD5DV","canonical_record":{"source":{"id":"2602.16304","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-02-18T09:36:46Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"fcc40e11db0dd4a4c43e8681aad5081d3628ffe5c872483038b72a2999ba0d2c","abstract_canon_sha256":"0a50dbe1a480bde87d0ecbbfea946978b7f4357baad56f7563e7c6eb977242b6"},"schema_version":"1.0"},"canonical_sha256":"e134a1f4754ea6904116f84f4b9dff2d1f0fc0252986d07a1be91bdb95790dbe","source":{"kind":"arxiv","id":"2602.16304","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2602.16304","created_at":"2026-07-15T00:21:16Z"},{"alias_kind":"arxiv_version","alias_value":"2602.16304v3","created_at":"2026-07-15T00:21:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2602.16304","created_at":"2026-07-15T00:21:16Z"},{"alias_kind":"pith_short_12","alias_value":"4E2KD5DVJ2TJ","created_at":"2026-07-15T00:21:16Z"},{"alias_kind":"pith_short_16","alias_value":"4E2KD5DVJ2TJAQIW","created_at":"2026-07-15T00:21:16Z"},{"alias_kind":"pith_short_8","alias_value":"4E2KD5DV","created_at":"2026-07-15T00:21:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:4E2KD5DVJ2TJAQIW7BHUXHP7FU","target":"record","payload":{"canonical_record":{"source":{"id":"2602.16304","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-02-18T09:36:46Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"fcc40e11db0dd4a4c43e8681aad5081d3628ffe5c872483038b72a2999ba0d2c","abstract_canon_sha256":"0a50dbe1a480bde87d0ecbbfea946978b7f4357baad56f7563e7c6eb977242b6"},"schema_version":"1.0"},"canonical_sha256":"e134a1f4754ea6904116f84f4b9dff2d1f0fc0252986d07a1be91bdb95790dbe","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-15T00:21:16.576611Z","signature_b64":"36oygDlqhOsvA5T0lToAuhuH8/ORbRyuy4x8DIokvwkz7pVi0pD6PaUvwAOd1SmDW7QJyN597bVjXgJJtB4TBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e134a1f4754ea6904116f84f4b9dff2d1f0fc0252986d07a1be91bdb95790dbe","last_reissued_at":"2026-07-15T00:21:16.575709Z","signature_status":"signed_v1","first_computed_at":"2026-07-15T00:21:16.575709Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2602.16304","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-15T00:21:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0GOXxC6KGBFWu2iVWLtyBf31kJc5Y15ghwzsxAzqiU7Xaw9946uVCFnEw1oSr5F83vfTvF8r4rih79J1kYO8Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:35:44.046776Z"},"content_sha256":"17984c13439d2c2021f7fb9fd1207ef62487140a7cfda7d049cdc25990c23bae","schema_version":"1.0","event_id":"sha256:17984c13439d2c2021f7fb9fd1207ef62487140a7cfda7d049cdc25990c23bae"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:4E2KD5DVJ2TJAQIW7BHUXHP7FU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Evaluation of Large Language Models for Detection of Malicious Python Packages","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Abdullah Al Jahid, Ahmed Ryan, Akond Ashfaque Ur Rahman, Ibrahim Khalil, Md Erfan, Md Rayhanur Rahman, Sungbin Park","submitted_at":"2026-02-18T09:36:46Z","abstract_excerpt":"Modern software development relies on open-source package repositories. Attackers use these to distribute malicious packages. Large Language Models (LLMs) can automatically detect these packages, but their ability to pinpoint specific malicious behaviors remains unclear. We evaluate 13 LLMs on two tasks using a dataset of 4,070 PyPI packages (370 malicious, 3,700 benign). The first task detects whether a package is malicious. The second identifies specific malicious indicators (lines of code). We evaluate each LLM across five prompt strategies and three temperatures.\n  For the first task, LLMs"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2602.16304","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2602.16304/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-15T00:21:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E0pNDylS8eOfVx3diWZxKLNCv+jnn1jJMgxTz9qh/o7RwRG1gmFBDbTVmBUEkM38AAwFbW23nrsZcKbWq+fMAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:35:44.047729Z"},"content_sha256":"38a91686bcc2740b08de4ed78acd254c453be5da0fc71bbb06b238a1b53310ba","schema_version":"1.0","event_id":"sha256:38a91686bcc2740b08de4ed78acd254c453be5da0fc71bbb06b238a1b53310ba"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4E2KD5DVJ2TJAQIW7BHUXHP7FU/bundle.json","state_url":"https://pith.science/pith/4E2KD5DVJ2TJAQIW7BHUXHP7FU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4E2KD5DVJ2TJAQIW7BHUXHP7FU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T18:35:44Z","links":{"resolver":"https://pith.science/pith/4E2KD5DVJ2TJAQIW7BHUXHP7FU","bundle":"https://pith.science/pith/4E2KD5DVJ2TJAQIW7BHUXHP7FU/bundle.json","state":"https://pith.science/pith/4E2KD5DVJ2TJAQIW7BHUXHP7FU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4E2KD5DVJ2TJAQIW7BHUXHP7FU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:4E2KD5DVJ2TJAQIW7BHUXHP7FU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0a50dbe1a480bde87d0ecbbfea946978b7f4357baad56f7563e7c6eb977242b6","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-02-18T09:36:46Z","title_canon_sha256":"fcc40e11db0dd4a4c43e8681aad5081d3628ffe5c872483038b72a2999ba0d2c"},"schema_version":"1.0","source":{"id":"2602.16304","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2602.16304","created_at":"2026-07-15T00:21:16Z"},{"alias_kind":"arxiv_version","alias_value":"2602.16304v3","created_at":"2026-07-15T00:21:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2602.16304","created_at":"2026-07-15T00:21:16Z"},{"alias_kind":"pith_short_12","alias_value":"4E2KD5DVJ2TJ","created_at":"2026-07-15T00:21:16Z"},{"alias_kind":"pith_short_16","alias_value":"4E2KD5DVJ2TJAQIW","created_at":"2026-07-15T00:21:16Z"},{"alias_kind":"pith_short_8","alias_value":"4E2KD5DV","created_at":"2026-07-15T00:21:16Z"}],"graph_snapshots":[{"event_id":"sha256:38a91686bcc2740b08de4ed78acd254c453be5da0fc71bbb06b238a1b53310ba","target":"graph","created_at":"2026-07-15T00:21:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2602.16304/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Modern software development relies on open-source package repositories. Attackers use these to distribute malicious packages. Large Language Models (LLMs) can automatically detect these packages, but their ability to pinpoint specific malicious behaviors remains unclear. We evaluate 13 LLMs on two tasks using a dataset of 4,070 PyPI packages (370 malicious, 3,700 benign). The first task detects whether a package is malicious. The second identifies specific malicious indicators (lines of code). We evaluate each LLM across five prompt strategies and three temperatures.\n  For the first task, LLMs","authors_text":"Abdullah Al Jahid, Ahmed Ryan, Akond Ashfaque Ur Rahman, Ibrahim Khalil, Md Erfan, Md Rayhanur Rahman, Sungbin Park","cross_cats":["cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-02-18T09:36:46Z","title":"An Evaluation of Large Language Models for Detection of Malicious Python Packages"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2602.16304","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:17984c13439d2c2021f7fb9fd1207ef62487140a7cfda7d049cdc25990c23bae","target":"record","created_at":"2026-07-15T00:21:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0a50dbe1a480bde87d0ecbbfea946978b7f4357baad56f7563e7c6eb977242b6","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-02-18T09:36:46Z","title_canon_sha256":"fcc40e11db0dd4a4c43e8681aad5081d3628ffe5c872483038b72a2999ba0d2c"},"schema_version":"1.0","source":{"id":"2602.16304","kind":"arxiv","version":3}},"canonical_sha256":"e134a1f4754ea6904116f84f4b9dff2d1f0fc0252986d07a1be91bdb95790dbe","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e134a1f4754ea6904116f84f4b9dff2d1f0fc0252986d07a1be91bdb95790dbe","first_computed_at":"2026-07-15T00:21:16.575709Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-15T00:21:16.575709Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"36oygDlqhOsvA5T0lToAuhuH8/ORbRyuy4x8DIokvwkz7pVi0pD6PaUvwAOd1SmDW7QJyN597bVjXgJJtB4TBw==","signature_status":"signed_v1","signed_at":"2026-07-15T00:21:16.576611Z","signed_message":"canonical_sha256_bytes"},"source_id":"2602.16304","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:17984c13439d2c2021f7fb9fd1207ef62487140a7cfda7d049cdc25990c23bae","sha256:38a91686bcc2740b08de4ed78acd254c453be5da0fc71bbb06b238a1b53310ba"],"state_sha256":"0f1fef14d1be1f80ad0671457966a88ff1e6555ccd095c5057e6d341181b36a4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rIy+xwCGgMPDJmA4Kz+V99ulTo56u1ihRFwuVl+BrymYLpFkBWDNTIoWxHHZmfp7aCViqRS2kZR35w2xdtkyAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T18:35:44.052978Z","bundle_sha256":"c4e693ca286e53b864d72dd765c7d39db162d103b5fb8f25e6676f6532d877dd"}}