#malware-detection (16 Repositories)
Ranked open-source repositories tagged with #malware-detection, scored by pull request acceptance likelihood and maintainer engagement velocity.
28.1%
8.6h
16 repositories tagged #malware-detection
Karib0u/rustinel
Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.
phylum-dev/cli
Command line interface for the Phylum API
AdventDevInc/kudu
Free Windows, Mac and Linux cleaner, scanner, and more.
wazuh/wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Lolitide/VirusDetector
Chrome/Edge 浏览器扩展，5 规则实时检测银狐木马钓鱼仿冒网站。域名仿冒 · ICP备案核查 · 下载拦截 · 链接分析 · 代码工程化 — 零依赖 Manifest V3。
manticore-projects/aurscan
Automatically scan AUR packages for malware before installing (using LLM/AI)
horsicq/XAPKDetector
APK/DEX detector for Windows, Linux and MacOS.
horsicq/Nauz-File-Detector
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
0xDanielLopez/TweetFeed
TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains, IPs, and SHA256/MD5 hashes.
pandare9x/Yara-Rules
Repository of Yara Rules
gensecaihq/Shai-Hulud-2.0-Detector
GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.
MalwareSamples/Malware-Feed
Bringing you the best of the worst files on the Internet.
rfxn/linux-malware-detect
Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring, quarantine, and multi-channel alerting
mxmssh/drltrace
Drltrace is a library calls tracer for Windows and Linux applications.
pandora-analysis/pandora
Pandora is an analysis framework to discover if a file is suspicious and conveniently show the results
vxunderground/MalwareSourceCode
Collection of malware source code for a variety of platforms in an array of different programming languages.