Explainable multi-modal ML for detecting malicious PyPI packages. Three-modality detection (metadata + AST static analysis + code stylometry), SHAP-driven Ladisa taxonomy mapping (7 attack vectors), real-time CLI scanner, and live PyPI monitoring. F1=0.9993 on 18.5K packages.
machine-learningstatic-analysispypi-packageopen-source-securitysupply-chain-securitycode-stylometrypip-security
-
Updated
May 14, 2026 - Python