I'm working on hexora, a library that detects malicious Python code using static analysis and machine learning.

Recently, I've added a simple ML model to filter out false positives. In the last month, I found and flagged more than 40 malicious Python packages.

Unlike the LLM approach, my library is not susceptible to prompt injection and deobfuscates Python code. Where LLMs see "obfuscated code, potentially harmful", my library decodes it and sees what's happening inside.

https://github.com/rushter/hexora