#malware-detection (22 Repositories)
Ranked open-source repositories tagged with #malware-detection, scored by pull request acceptance likelihood and maintainer engagement velocity.
42.0%
28.1h
22 repositories tagged #malware-detection
utmstack/UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
phylum-dev/cli
Command line interface for the Phylum API
wazuh/wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
AdventDevInc/kudu
Free Windows, Mac and Linux cleaner, scanner, and more.
Lolitide/VirusDetector
Chrome/Edge 浏览器扩展，5 规则实时检测银狐木马钓鱼仿冒网站。域名仿冒 · ICP备案核查 · 下载拦截 · 链接分析 · 代码工程化 — 零依赖 Manifest V3。
Karib0u/rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
malwareworld/MalwareWorld
System based on +500 blacklists to detect internet potencialy malicious hosts
pandora-analysis/pandora
Pandora is an analysis framework to discover if a file is suspicious and conveniently show the results
gensecaihq/Shai-Hulud-2.0-Detector
GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.
atomdrift-project/scan
0-day malware detection for binaries, source & scripts (that doesn't suck)
manticore-projects/aurscan
Automatically scan AUR packages for malware before installing (using LLM/AI)
pandare9x/Yara-Rules
Repository of Yara Rules
mxmssh/drltrace
Drltrace is a library calls tracer for Windows and Linux applications.
vxunderground/MalwareSourceCode
Collection of malware source code for a variety of platforms in an array of different programming languages.
MalwareSamples/Malware-Feed
Bringing you the best of the worst files on the Internet.
last-byte/PersistenceSniper
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
horsicq/XAPKDetector
APK/DEX detector for Windows, Linux and MacOS.
rfxn/linux-malware-detect
Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring, quarantine, and multi-channel alerting
horsicq/Nauz-File-Detector
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
0xDanielLopez/TweetFeed
TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains, IPs, and SHA256/MD5 hashes.
hasherezade/hollows_hunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).