Closing the Binary Blind Spot: Domain-Knowledge Injection for LLM Malware Triage in npm Packages

IntroductionSupply chain attacks on package registries have grown in volume and sophistication [1]...