# Databricks — Closing the Binary Blind Spot: Domain-Knowledge Injection for LLM Malware Triage in npm Packages

- Company: Databricks (databricks.com)
- Announced: 2026-10-16T15:37:00+00:00
- Category: research-paper
- Coverage: not counted
- Announcement: yes
- Group: announcements
- Source: https://www.databricks.com/blog/closing-binary-blind-spot-domain-knowledge-injection-llm-malware-triage-npm-packages
- Record: https://forck.live/items/23587-closing-the-binary-blind-spot-domain-knowledge-injection-for-llm-malware
- Subject: Mosaic AI

Databricks researchers studied LLM-based triage of npm packages containing bundled binaries, finding that binary-bearing packages fail to reach a decisive malicious verdict more than twice as often as source-only ones (14.4% vs 6.2%). They developed capability profiles—declarative playbooks encoding malicious techniques—that inject structured evidence into prompts at inference time, improving detection across budget and frontier models without retraining.

## Evidence

Verbatim from https://www.databricks.com/blog/closing-binary-blind-spot-domain-knowledge-injection-llm-malware-triage-npm-packages:

> Our analysis found packages with bundled binaries to be both the rarest and the hardest for the pipeline to triage. An adversary distributing malicious JavaScript can assume the target already has the runtime to execute the payload, whereas a binary must be compiled for a range of target machines. Across OSV-confirmed npm malware, binary-bearing packages fail to reach a decisive malicious verdict more than twice as often as source-only ones (14.4% vs 6.2%).

---

Record: https://forck.live/items/23587-closing-the-binary-blind-spot-domain-knowledge-injection-for-llm-malware
Catalogue: https://forck.live/llms.txt
Current issue: https://forck.live/feed.md