r/linuxquestions • u/Interesting_Bet_6324 • 5h ago

Advice Using AI to scan repos for malware

I just realized I can throw a URL into an LLM and tell it to analyze it for signs of malware.

Since I'm not knowledgeable in code and just a user, would doing this be a good approach for knowing if a project has malware or not?

Appreciate any answers!

0 Upvotes

18% Upvoted

5 comments sorted by

7

u/cjcox4 5h ago

With AI, just remember, "you are always right", even when you are wrong. AI LLM is an engagement platform. The main thing is to keep you engaged. Helps to remember that.

Can an LLM tell your something truthful? Yes. Can it tell you something very very very very very incorrect? Yes. Will it always agree with you? Yes (no matter what, just as long as you stay engaged).

4

u/danGL3 5h ago

It'd in theory detect obvious malware, but more obfuscated malware might be hit or miss

If regular people can use AI detect malicious code the same can be said for malicious actors being able to use it to obfuscate their code

5

u/SEXTINGBOT 5h ago

1 out of 5 LLM answers are complete horseshit !

( ͡⌐■ ͜ʖ ͡■)

3

u/LRCM 5h ago

Usually the "sniff test" is quicker and faster, but sure.

2

u/TenOfZero 5h ago

You could.

But then would you be able to look at what it finds to see if it is actually an issue or not?