Taint-Style Vulnerability Detection and Confirmation for Node.js Packages Using LLM Agent Reasoning

arXiv:2604.20179v1 Announce Type: cross Abstract: The rapidly evolving Node$.$js ecosystem currently includes millions of packages and is a critical part of modern software supply chains, making vulnerability detection of Node$.$js packages increasingly important. However, traditional program...