From single pull requests to full software packages: Detecting malicious code at scale (opens in new tab)

By combining stacked LLM evaluations with tool-driven investigation, we scaled malicious code detection from pull requests to dependency packages without sacrificing accuracy or cost control.