Describes Helsing's multi-layer AI vetting pipeline for detecting malicious behavior in software packages that traditional rule-based analysis cannot identify. The system uses DistilBERT for initial scanning, LLMs for triaging, and human review to identify packages with unwanted telemetry, obfuscated code, and supply chain risks.