[uyzstvqs]

I'm curious if it'd be possible to use a Code LLM to scan GitHub repos and detect possible malware hiding in source code.

[pingou]

I'm afraid a few simple tweaks, especially if the hackers themselves have access to the code LLM to try out their code, will be sufficient to evade detection.

[nicce]

Endless race like with Anti-Virus software.

[ChrisMarshallNY]

I have a feeling that we'll be seeing some businesses, built, around exactly that.

[bdangubic]

Github? ;)

[tehlike]

Socket.dev is not built around this but makes use of this.

[dmazzoni]

If such a tool became commonplace, bad actors would just run it on their own malware and keep tweaking it until the LLM failed to detect it.

[feross]

This is what we do at https://socket.dev.