Cloudflare 用机器学习在真实流量中捕获八个恶意 JavaScript 载荷
原标题：When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
AI 摘要
Cloudflare 介绍其客户端安全机器学习模型 Page Shield ML 在真实流量中发现的四个恶意 JavaScript 操作，共八个载荷。这些载荷在 VirusTotal 和 URLScan 等传统扫描工具中大多未被标记，但 Page Shield ML 全部检出。系统采用图神经网络分析代码结构，并用 Workers AI 上的轻量 LLM 复核，再以多个前沿模型作为教师进行投票标注，形成反馈循环。
正文节选
A modern storefront can look perfectly healthy while malicious JavaScript works underneath: siphoning affiliate revenue, hijacking searches and clicks, tampering with analytics, or asking a remote server what to execute next. Pages load, products appear, and checkout works — yet the browser may be quietly doing something the site owner never authorized. That is the blind spot our Client-Side Security machine learning (ML) model is built to expose. This post follows four operations, spanning eigh