{"data":{"id":"10.48550/arxiv.2609.27058","type":"dois","attributes":{"doi":"10.48550/arxiv.2609.27058","prefix":"10.48550","suffix":"arxiv.2609.27058","identifiers":[{"identifier":"2609.27058","identifierType":"arXiv"}],"alternateIdentifiers":[{"alternateIdentifierType":"arXiv","alternateIdentifier":"2609.27058"}],"creators":[{"name":"Feng, Rong","nameType":"Personal","givenName":"Rong","familyName":"Feng","affiliation":[],"nameIdentifiers":[]},{"name":"Saha, Suman","nameType":"Personal","givenName":"Suman","familyName":"Saha","affiliation":[],"nameIdentifiers":[]}],"titles":[{"title":"Stage-Supervised Latent Reasoning for Single-Shot JavaScript Deobfuscation"}],"publisher":"arXiv","container":{},"publicationYear":2026,"subjects":[{"lang":"en","subject":"Software Engineering (cs.SE)","subjectScheme":"arXiv"},{"subject":"FOS: Computer and information sciences","subjectScheme":"Fields of Science and Technology (FOS)"}],"contributors":[],"dates":[{"date":"2026-09-22T20:59:21Z","dateType":"Submitted","dateInformation":"v1"},{"date":"2026-09-24T00:10:56Z","dateType":"Updated","dateInformation":"v1"},{"date":"2026-09","dateType":"Available","dateInformation":"v1"}],"language":null,"types":{"ris":"GEN","bibtex":"misc","citeproc":"article","schemaOrg":"CreativeWork","resourceType":"Article","resourceTypeGeneral":"Preprint"},"relatedIdentifiers":[],"relatedItems":[],"sizes":[],"formats":[],"version":"1","rightsList":[{"rights":"Creative Commons Attribution 4.0 International","rightsUri":"https://creativecommons.org/licenses/by/4.0/legalcode","schemeUri":"https://spdx.org/licenses/","rightsIdentifier":"cc-by-4.0","rightsIdentifierScheme":"SPDX"}],"descriptions":[{"description":"JavaScript obfuscation is widely used to protect code, but it also makes program analysis and security review substantially harder. Existing LLM-based deobfuscation methods usually treat the task as one-step translation, ignoring the staged structure of practical deobfuscation pipelines. This WIP paper proposes a stage-aware latent reasoning framework that converts intermediate outputs from a deterministic deobfuscation tool into supervision for Coconut-based training. The model learns from multi-stage rewrites during training but generates the final cleaned program in a single shot at inference time. Preliminary results on JsDeObsBench show that the Coconut-based model improves syntactic validity to 50%, compared with 15% for direct fine-tuning and 25% for a zero-shot baseline, and reaches 80% semantic correctness among valid outputs, indicating better semantic faithfulness than either comparison model in deobfuscation.","descriptionType":"Abstract"}],"geoLocations":[],"fundingReferences":[],"xml":"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","url":"https://arxiv.org/abs/2609.27058","contentUrl":null,"metadataVersion":0,"schemaVersion":"http://datacite.org/schema/kernel-4","source":"mds","isActive":true,"state":"findable","reason":null,"viewCount":0,"viewsOverTime":[],"downloadCount":0,"downloadsOverTime":[],"referenceCount":0,"citationCount":0,"citationsOverTime":[],"partCount":0,"partOfCount":0,"versionCount":0,"versionOfCount":0,"created":"2026-09-24T02:12:39.000Z","registered":"2026-09-24T02:12:40.000Z","published":"2026","updated":"2026-09-24T02:12:40.000Z"},"relationships":{"client":{"data":{"id":"arxiv.content","type":"clients"}},"provider":{"data":{"id":"arxiv","type":"providers"}},"media":{"data":{"id":"10.48550/arxiv.2609.27058","type":"media"}},"references":{"data":[]},"citations":{"data":[]},"parts":{"data":[]},"partOf":{"data":[]},"versions":{"data":[]},"versionOf":{"data":[]}}}}