Understand this story
Databricks has been collecting npm malware samples since November 2025. Its blog discloses that, among the 11,413 package-versions scanned and verified, 96.2% hid their payloads in source code or on external servers, while only 3.8% (432) bundled binaries; however, the proportion of bundled-binary packages from which no clear malicious conclusion could be drawn was more than twice that of pure source-code packages (14.4% versus 6.2%). The team evaluated 9 models, including Claude Haiku 4.5, Gemini 3.5 Flash, GPT-5.4-nano, Qwen3-Next 80B, and others, and injected precomputed static evidence as capability profiles during the inference stage to improve detection quality for both budget-tier and frontier models. Currently, public information is still based on what this blog discloses, and there have been no subsequent developments.
AI-generated from public reports
Latest development · Report
Databricks uses domain knowledge injection to improve LLMs' ability to detect malicious npm binary packagesDevelopments
1 confirmed developments
Databricks has been collecting npm malware samples since November 2025
Source:Databricks Blog
Reports and discussion timeline
Browse reports and discussion by time. Their evidence levels remain distinct.
Oct 16
Databricks BlogFirst-party
Databricks uses domain knowledge injection to improve LLMs' ability to detect malicious npm binary packages
Since November 2025, Databricks has been collecting malicious npm samples. Among the 11,413 package-versions scanned and verified, 96.2% hid their payloads in source code or on external servers, and only 3.8% (432) bundled binaries; however, the proportion of such packages for which no clear malicious conclusion could be reached was more than twice that of pure source-code packages (14.4% vs 6.2%). The team evaluated 9 models (including Claude Haiku 4.5, Gemini 3.5 Flash, GPT-5.4-nano, Qwen3-Next 80B, etc.) and injected precomputed static evidence as capability profiles during inference to improve detection quality for both budget-tier and frontier models.