Databricks shows domain-knowledge injection improves LLM malware triage of npm binaries

Databricks reports that budget LLMs missed 50% of malicious npm binary payloads at the escalation threshold without extra context. Injecting pre-computed binary capability profiles before the model reasons cut that failure rate to 4%, with a 4.25% false-positive rate on a benign set.