Closing the Binary Blind Spot: Domain-Knowledge Injection for LLM Malware Triage in npm Packages

Injecting domain knowledge into large language models resolves the binary blind spot to enhance automated malware triage across npm packages. This approach strengthens software supply chain defenses against the rising volume and sophistication of attacks targeting package registries.