CI-Guard: Static Analysis for Detecting Supply Chain Attacks in Package Managers
Otsmane, Ahmed · Zenodo (CERN European Organization for Nuclear Research) · 2026
This version extends the original preprint with improved methodology details,additional detection patterns, refined evaluation results, and minor corrections.The tool is evaluated on popular NPM and PyPI packages and demonstrates strongdetection performance with zero false positives. Source code: https://github.com/Otsmane-Ahmed/ci-supplychain-guard