From single pull requests to full software packages: Detecting malicious code at scale

Datadog’s engineering team describes how they scale malicious code detection across pull requests and software package dependencies using stacked LLM evaluations to identify supply chain threats. The approach combines static analysis with AI-powered reasoning to flag suspicious patterns that traditional rule-based scanners miss in open source contributions.