一句话：提出 IntelliRadar 平台，从社交媒体、开发者论坛等非结构化网络情报中识别恶意软件包，弥补现有数据库的延迟与覆盖不足。
公共注册表中的恶意软件包对软件供应链安全构成严重威胁。当前软件成分分析（SCA）工具依赖 OSV、Snyk 等数据库进行检测，但这些数据库更新滞后、覆盖不全，且忽略了社交媒体和开发者论坛等非结构化来源的情报——新威胁往往首先在这些渠道被报告。这种延迟延长了恶意软件包的生命周期，增加了下游用户的风险。为此，作者提出 IntelliRadar，一个从网络情报中精准定位恶意软件包的综合平台，旨在利用非结构化情报及时识别新出现的恶意包。摘要未报告具体的评估方法与实验结果。
Malicious packages in public registries pose serious threats to software supply chain security. While current software component analysis (SCA) tools rely on databases like OSV and Snyk to detect these threats, these databases suffer from delayed updates and incomplete coverage. However, they miss intelligence from unstructured sources like social media and developer forums, where new threats are often first reported. This delay extends the lifecycle of malicious packages and increases risks for downstream users.
@inproceedings{paperbot11935,
title = {IntelliRadar: A Comprehensive Platform to Pinpoint Malicious Packages from Cyber Intelligence},
author = {Wenbo Guo and Chengwei Liu and Limin Wang and Yiran Zhang and Jiahui Wu and Zhengzi Xu and Yang Liu},
booktitle = {ICSE},
year = {2026},
doi = {10.1145/3744916.3773113}
}