LLMs Struggle with Binary npm Packages in Malware Analysis

2026-10-16

Malware in npm packages that contain binary files are twice as likely to evade a conclusive malicious verdict by LLMs compared to source-only packages, with rates of 14.4% versus 6.2% respectively for OSV-confirmed threats.