[论文笔记]A Needle is an Outlier in a Haystack: Hunting Malicious PyPI Packages with Code Clustering

Title: A Needle is an Outlier in a Haystack: Hunting Malicious PyPI Packages with Code Clustering
Authors: Wentao Liang, Xiang Ling, Jingzheng Wu, Tianyue Luo, Yanjun Wu
Affiliations: Institute of Software, Chinese Acadeny of Sciences, University of Chinese Academy of Sciences

1. 现有挑战

• PyPI 开放上传，，恶意包可通过软件供应链快速扩散；96% 的 PyPI 恶意包在安装时触发 payload，而安装脚本 setup.py 是核心攻击面。