{"total":26,"rows":[{"id":"2406.10279","title":"We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs","created":"2024-06-12","cited_by_count":65,"area":null},{"id":"2410.04490","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","created":"2024-10-06","cited_by_count":14,"area":null},{"id":"2403.15600","title":"Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers","created":"2024-03-22","cited_by_count":13,"area":null},{"id":"2308.04898","title":"An Empirical Study on Using Large Language Models to Analyze Software Supply Chain Security Failures","created":"2023-08-09","cited_by_count":11,"area":null},{"id":"2412.18442","title":"SoK: On the Offensive Potential of AI","created":"2024-12-24","cited_by_count":5,"area":null},{"id":"2504.17198","title":"Automatically Generating Rules of Malicious Software Packages via Large Language Model","created":"2025-04-24","cited_by_count":2,"area":null},{"id":"2509.06703","title":"On the (In)Security of Loading Machine Learning Models","created":"2025-09-08","cited_by_count":2,"area":null},{"id":"2609.05881","title":"Broken on Arrival: Silently Defective LLM Artifacts in Public Model Registries and How to Catch Them","created":"2026-09-05","cited_by_count":2,"area":null},{"id":"2411.13459","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","created":"2024-11-20","cited_by_count":1,"area":null},{"id":"2412.19088","title":"Integrating Artificial Open Generative Artificial Intelligence into Software Supply Chain Security","created":"2024-12-26","cited_by_count":1,"area":null},{"id":"2509.20277","title":"Investigating Security Implications of Automatically Generated Code on the Software Supply Chain","created":"2025-09-24","cited_by_count":1,"area":null},{"id":"2512.01255","title":"Large Language Models Cannot Reliably Detect Vulnerabilities in JavaScript: The First Systematic Benchmark and Evaluation","created":"2025-12-01","cited_by_count":1,"area":null},{"id":"2605.03309","title":"Cryptographic Registry Provenance: Structural Defense Against Dependency Confusion in AI Package Ecosystems","created":"2026-05-05","cited_by_count":1,"area":null},{"id":"2605.06279","title":"Correct Code, Vulnerable Dependencies: A Large Scale Measurement Study of LLM-Specified Library Versions","created":"2026-05-07","cited_by_count":1,"area":null},{"id":"2312.10861","title":"Code Ownership in Open-Source AI Software Security","created":"2023-12-18","cited_by_count":0,"area":null},{"id":"2405.16655","title":"Predicting Likely-Vulnerable Code Changes: Machine Learning-based Vulnerability Protections for Android Open Source Project","created":"2024-05-26","cited_by_count":0,"area":null},{"id":"2409.00199","title":"Unintentional Security Flaws in Code: Automated Defense via Root Cause Analysis","created":"2024-08-30","cited_by_count":0,"area":null},{"id":"2411.03926","title":"Act in Collusion: Distributed Multi-Target Backdoor Attacks in Federated Learning","created":"2024-11-06","cited_by_count":0,"area":null},{"id":"2510.08609","title":"Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?","created":"2025-10-07","cited_by_count":0,"area":null},{"id":"2602.09182","title":"One RNG to Rule Them All: How Randomness Becomes an Attack Vector in Machine Learning","created":"2026-02-09","cited_by_count":0,"area":null},{"id":"2606.11007","title":"Understanding and mitigating the risks of OpenClaw for non-technical users: A practical guide with Skill","created":"2026-06-09","cited_by_count":0,"area":null},{"id":"2606.19023","title":"Lifecycle-Aware Dynamic Analysis for Secure ML Model Execution","created":"2026-06-17","cited_by_count":0,"area":null},{"id":"2606.30587","title":"Words Speak Louder Than Code: Investigating Cognitive Heuristics in LLM-Based Code Vulnerability Detection","created":"2026-06-29","cited_by_count":0,"area":null},{"id":"2607.03350","title":"LLM-Enhanced Hierarchical Heterogeneous Graph Representation Learning for Malicious Python Package Detection","created":"2026-07-03","cited_by_count":0,"area":null},{"id":"2608.02695","title":"Stylometric Defenses Against Author Impersonation in Software Repositories","created":"2026-08-03","cited_by_count":0,"area":null},{"id":"2609.31282","title":"Resource-Optimized and Energy-Aware Agentic AI Framework Anchored on Blockchain for Secure Software Supply Chains","created":"2026-09-25","cited_by_count":0,"area":null}],"next_cursor":null}