{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:WTGAC6OQ7JAYGPRZKTOSNCBK2A","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"104990f3e109a91578223396d04560e7c0e1e3e84a9f8afdfd34663120710999","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-09-27T10:14:19Z","title_canon_sha256":"a3d4290622feebe85121e768aa9a83d85bae5d6a2669b4cf0d37c34bae14a236"},"schema_version":"1.0","source":{"id":"2209.13288","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2209.13288","created_at":"2026-07-05T06:51:19Z"},{"alias_kind":"arxiv_version","alias_value":"2209.13288v1","created_at":"2026-07-05T06:51:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2209.13288","created_at":"2026-07-05T06:51:19Z"},{"alias_kind":"pith_short_12","alias_value":"WTGAC6OQ7JAY","created_at":"2026-07-05T06:51:19Z"},{"alias_kind":"pith_short_16","alias_value":"WTGAC6OQ7JAYGPRZ","created_at":"2026-07-05T06:51:19Z"},{"alias_kind":"pith_short_8","alias_value":"WTGAC6OQ","created_at":"2026-07-05T06:51:19Z"}],"graph_snapshots":[{"event_id":"sha256:6d2e0b2402638ddcf5824e4de33f975b3ba53bf484f4908e916674f3316613c2","target":"graph","created_at":"2026-07-05T06:51:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2209.13288/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While attackers often distribute malware to victims via open-source, community-driven package repositories, these repositories do not currently run automated malware detection systems. In this work, we explore the security goals of the repository administrators and the requirements for deployments of such malware scanners via a case study of the Python ecosystem and PyPI repository, which includes interviews with administrators and maintainers. Further, we evaluate existing malware detection techniques for deployment in this setting by creating a benchmark dataset and comparing several existin","authors_text":"Duc-Ly Vu, John Speed Meyers, Zachary Newman","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-09-27T10:14:19Z","title":"A Benchmark Comparison of Python Malware Detection Approaches"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2209.13288","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2772baf6a55e9a96925a822b43c7e4b17d552d2c3ca23278afcc873cc617893b","target":"record","created_at":"2026-07-05T06:51:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"104990f3e109a91578223396d04560e7c0e1e3e84a9f8afdfd34663120710999","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-09-27T10:14:19Z","title_canon_sha256":"a3d4290622feebe85121e768aa9a83d85bae5d6a2669b4cf0d37c34bae14a236"},"schema_version":"1.0","source":{"id":"2209.13288","kind":"arxiv","version":1}},"canonical_sha256":"b4cc0179d0fa41833e3954dd26882ad02de323d68bfd8d5c59a57868f2b1e9c5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b4cc0179d0fa41833e3954dd26882ad02de323d68bfd8d5c59a57868f2b1e9c5","first_computed_at":"2026-07-05T06:51:19.840776Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:51:19.840776Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FWMwBL5oVwtvy55Ety5MQtu6Jk8NuApEFLfKJ9qTll3JHm+NdmW/yTuqlJkdsOZcdH0MQZN3qib7kl4iGBbHBA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:51:19.841293Z","signed_message":"canonical_sha256_bytes"},"source_id":"2209.13288","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2772baf6a55e9a96925a822b43c7e4b17d552d2c3ca23278afcc873cc617893b","sha256:6d2e0b2402638ddcf5824e4de33f975b3ba53bf484f4908e916674f3316613c2"],"state_sha256":"007c0624ce87863702d1e2a7301cae885677a189ecfd63b7d3334712fed83b5d"}