{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,7]],"date-time":"2026-05-07T10:50:51Z","timestamp":1778151051149,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":36,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,5,13]],"date-time":"2024-05-13T00:00:00Z","timestamp":1715558400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"name":"Cyber Security Research Centre Limited","award":["C21-00267"],"award-info":[{"award-number":["C21-00267"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,5,13]]},"DOI":"10.1145\/3589334.3645543","type":"proceedings-article","created":{"date-parts":[[2024,5,8]],"date-time":"2024-05-08T07:08:13Z","timestamp":1715152093000},"page":"1779-1789","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":13,"title":["Malicious Package Detection using Metadata Information"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0965-6255","authenticated-orcid":false,"given":"Sajal","family":"Halder","sequence":"first","affiliation":[{"name":"Data61, CSIRO & Charles Sturt University, Melbourne, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5848-7451","authenticated-orcid":false,"given":"Michael","family":"Bewong","sequence":"additional","affiliation":[{"name":"Charles Sturt University, NSW, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0487-0615","authenticated-orcid":false,"given":"Arash","family":"Mahboubi","sequence":"additional","affiliation":[{"name":"Charles Sturt University, NSW, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1733-9479","authenticated-orcid":false,"given":"Yinhao","family":"Jiang","sequence":"additional","affiliation":[{"name":"Charles Sturt University, NSW, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8317-5727","authenticated-orcid":false,"given":"Md Rafiqul","family":"Islam","sequence":"additional","affiliation":[{"name":"Charles Sturt University, NSW, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4868-4945","authenticated-orcid":false,"given":"Md Zahid","family":"Islam","sequence":"additional","affiliation":[{"name":"Charles Sturt University, NSW, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8636-1891","authenticated-orcid":false,"given":"Ryan HL","family":"Ip","sequence":"additional","affiliation":[{"name":"Charles Sturt University, NSW, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8033-0998","authenticated-orcid":false,"given":"Muhammad Ejaz","family":"Ahmed","sequence":"additional","affiliation":[{"name":"Data61, CSIRO, Melbourne, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5944-1335","authenticated-orcid":false,"given":"Gowri Sankar","family":"Ramachandran","sequence":"additional","affiliation":[{"name":"QUT, Brisbane, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9696-3626","authenticated-orcid":false,"given":"Muhammad","family":"Ali Babar","sequence":"additional","affiliation":[{"name":"University of Adelaide, Adelaide, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,5,13]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2020.106365"},{"key":"e_1_3_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICTCS.2017.29"},{"key":"e_1_3_2_2_3_1","volume-title":"Scalable Wireless Anomaly Detection with Generative-LSTMs on RF Post-Detection Metadata. In 2022 IEEE Wireless Communications and Networking Conference (WCNC). IEEE, 483--488","author":"Barnes-Cook Blake","year":"2022","unstructured":"Blake Barnes-Cook and Timothy O'Shea. 2022. Scalable Wireless Anomaly Detection with Generative-LSTMs on RF Post-Detection Metadata. In 2022 IEEE Wireless Communications and Networking Conference (WCNC). IEEE, 483--488."},{"key":"e_1_3_2_2_4_1","volume-title":"Greedy function approximation: a gradient boosting machine. Annals of statistics","author":"Friedman Jerome H","year":"2001","unstructured":"Jerome H Friedman. 2001. Greedy function approximation: a gradient boosting machine. Annals of statistics (2001), 1189--1232."},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-NIER.2019.00012"},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-SEIP52600.2021.00035"},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-020-00345-2"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2021.102804"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2004.43"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510142"},{"key":"e_1_3_2_2_11_1","volume-title":"Generalized linear models. Handbook of Computational Statistics: Concepts and Methods","author":"M\u00fcller Marlene","year":"2012","unstructured":"Marlene M\u00fcller. 2012. Generalized linear models. Handbook of Computational Statistics: Concepts and Methods (2012), 681--709."},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.14569\/IJACSA.2022.0130593"},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3307339.3343255"},{"key":"e_1_3_2_2_14_1","unstructured":"Npm Inc. 2023. State Of Npm 2023: The Overview. Online. https:\/\/blog.sandworm.dev\/series\/state-of-npm-2023 Accessed on 2023--9--12."},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3538969.3544415"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-52683-2_2"},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3098954.3120928"},{"key":"e_1_3_2_2_18_1","volume-title":"Machine learning","author":"Pisner Derek A","unstructured":"Derek A Pisner and David M Schnyer. 2020. Support vector machine. In Machine learning. Elsevier, 101--121."},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3538969.3543815"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510104"},{"key":"e_1_3_2_2_21_1","unstructured":"Sonatype. 2019. 2019 State of the Software Supply Chain Report Reveals Best Practices From 36 000 Open Source Software Development Teams. https:\/\/www.sonatype.com\/press-release-blog\/2019-state-of-thesoftware- supply-chain-report-reveals-best-practices-from-36000-opensource-software-development-teams"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3512225"},{"key":"e_1_3_2_2_23_1","unstructured":"Synopsys. 2020. Synopsys 2020 Open Source Security and Risk Analysis Report. https:\/\/www.synopsys.com\/content\/dam\/synopsys\/sig-assets\/reports\/ 2020-ossra-report.pdf"},{"key":"e_1_3_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-65745-1_7"},{"key":"e_1_3_2_2_25_1","unstructured":"Laurie Voss. 2018. npm and the future of JavaScript. https:\/\/slides.com\/seldo\/npmfuture- of-javascript."},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE51524.2021.9678526"},{"key":"e_1_3_2_2_27_1","volume-title":"Typosquatting and combosquatting attacks on the python ecosystem. In 2020 ieee european symposium on security and privacy workshops (euros&pw)","author":"Vu Duc-Ly","unstructured":"Duc-Ly Vu, Ivan Pashchenko, Fabio Massacci, Henrik Plate, and Antonino Sabetta. 2020. Typosquatting and combosquatting attacks on the python ecosystem. In 2020 ieee european symposium on security and privacy workshops (euros&pw). IEEE, 509--514."},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3512235"},{"key":"e_1_3_2_2_29_1","first-page":"2627","article-title":"Anomaly detection in seismic data--metadata using simple machine-learning models","volume":"92","author":"Zaccarelli Riccardo","year":"2021","unstructured":"Riccardo Zaccarelli, Dino Bindi, and Angelo Strollo. 2021. Anomaly detection in seismic data--metadata using simple machine-learning models. Seismological Society of America , Vol. 92, 4 (2021), 2627--2639.","journal-title":"Seismological Society of America"},{"key":"e_1_3_2_2_30_1","volume-title":"OpenSSF Scorecard: On the Path Toward Ecosystem-Wide Automated Security Metrics","author":"Zahan Nusrat","year":"2023","unstructured":"Nusrat Zahan, Parth Kanakiya, Brian Hambleton, Shohanuzzaman Shohan, and Laurie Williams. 2023. OpenSSF Scorecard: On the Path Toward Ecosystem-Wide Automated Security Metrics. IEEE Security & Privacy (2023)."},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510457.3513044"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3449813"},{"key":"e_1_3_2_2_33_1","volume-title":"Multilayer Feedforward Artificial Neural Network","author":"Zhao LM","year":"1999","unstructured":"LM Zhao, HY Hu, DH Wei, and SQ Wang. 1999. Multilayer Feedforward Artificial Neural Network. YellowRiver Water Conservancy Press: Zhengzhou, China (1999)."},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3201379"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3449920"},{"key":"e_1_3_2_2_36_1","volume-title":"USENIX security symposium","author":"Zimmermann Markus","unstructured":"Markus Zimmermann, Cristian-Alexandru Staicu, Cam Tenny, and Michael Pradel. 2019. Small World with High Risks: A Study of Security Threats in the npm Ecosystem.. In USENIX security symposium, Vol. 17. io"}],"event":{"name":"WWW '24: The ACM Web Conference 2024","location":"Singapore Singapore","acronym":"WWW '24","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the ACM Web Conference 2024"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3589334.3645543","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3589334.3645543","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T00:28:09Z","timestamp":1755822489000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3589334.3645543"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5,13]]},"references-count":36,"alternative-id":["10.1145\/3589334.3645543","10.1145\/3589334"],"URL":"https:\/\/doi.org\/10.1145\/3589334.3645543","relation":{},"subject":[],"published":{"date-parts":[[2024,5,13]]},"assertion":[{"value":"2024-05-13","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}