PyPI · npm
mandiant/flare-floss
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Apache-2.0Oct 16, 2026 · metrics 2.10.0
All tags
Catalogue tag
#malware
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
25 records
PyPI
mvt-project/mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
Custom licenseSep 19, 2026 · metrics 2.10.0
crates.io · Go · npm +1
VirusTotal/yara-x
A rewrite of YARA in Rust.
BSD-3-ClauseOct 22, 2026 · metrics 2.10.0
PyPI
SpamScope/mail-parser
A tool that parses emails by enhancing the Python standard library, extracting all details into a comprehensive object.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm · PyPI
DNSZLSK/muad-dib
Real-time npm/PyPI supply-chain threat detection. Behavioral chain analysis, AST scanning, IOC feeds, and compound scoring engine.
AGPL-3.0Oct 20, 2026 · metrics 2.10.0
Go
jm33-m0/emp3r0r
Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.
GPL-3.0Sep 9, 2026 · metrics 2.10.0
Go
defended-net/malwatch
⚡️ Fast and lightweight malware scanner written in go.
AGPL-3.0Sep 18, 2026 · metrics 2.10.0
PyPI
CybercentreCanada/assemblyline-base
Base components for Assemblyline 4 (Datastore, ODM, Filestore, Remote Datatypes, utils function, etc...)
MITOct 22, 2026 · metrics 2.10.0
PyPI
CybercentreCanada/assemblyline-ui
Web interface and APIs for Assemblyline 4
MITSep 17, 2026 · metrics 2.10.0
PyPI
CybercentreCanada/assemblyline-v4-service
Base service class from Assemblyline 4
MITOct 20, 2026 · metrics 2.10.0
PyPI
CybercentreCanada/assemblyline-core
Core server components for Assemblyline 4 (Alerter, dispatcher, expiry, ingester, scaler, updater, ...)
MITOct 22, 2026 · metrics 2.10.0
PyPI
wmetcalf/blastbox
Reusable detonation framework: run untrusted documents through disposable, hardened workers
MITSep 13, 2026 · metrics 2.10.0
npm
KirtashDev/dephawk
🦅 Catch npm dependencies red-handed at runtime — see & block when one reads your SSH keys, steals secrets, or phones home.
MITSep 18, 2026 · metrics 2.10.0
Go
myguard-labs/mailstrix
Mailstrix is the owl that finds malware hiding in your mail. It takes hostile attachments apart — unwrapping OLE2/OOXML, VBA, RTF objects, PDFs, archives and nested carriers — until YARA detection rules can finally see the dangerous bits. It runs out-of-process behind Rspamd (async HTTP), SpamAssassin, an ICAP server, Dovecot Sieve, or standalone
MITOct 18, 2026 · metrics 2.10.0
—
JusticeRage/Manalyze
A static analyzer for PE executables.
GPL-3.0Oct 21, 2026 · metrics 2.10.0
npm
scanii/scanii-node
Typescript interface to Scanii API
Apache-2.0Oct 5, 2026 · metrics 2.10.0
PyPI
CybercentreCanada/assemblyline-service-client
Service client that interfaces with the API to fetch tasks and publish the result for a service in Assemblyline 4
MITSep 17, 2026 · metrics 2.10.0
Packagist
phpMussel/FrontEnd
phpMussel front-end (dedicated Composer version).
GPL-2.0Oct 1, 2026 · metrics 2.10.0
PyPI
the-hollowclan/LurkerX
Decompile, optimize, recompile, and integrate spyware and remote control features into Android Apps with LurkerX, the ultimate tool for security researchers, penetration testers, and ethical hackers.
MITOct 19, 2026 · metrics 2.10.0
Packagist
phpMussel/Web
phpMussel upload handler (dedicated Composer version).
GPL-2.0Sep 6, 2026 · metrics 2.10.0
PyPI
CybercentreCanada/cart
Python implementation of the CaRT library for (un)inerting files.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
truelove-dreamer/dsh-plugin-vetting
DeepSeek Harness plugin: heuristic malware vetting for installed third-party plugins
No licenseSep 18, 2026 · metrics 2.10.0
Packagist
phpMussel/CLI
phpMussel CLI-mode (dedicated Composer version).
GPL-2.0Sep 18, 2026 · metrics 2.10.0
npm
OjasKord/url-safety-validator-mcp
AI-powered URL safety validator MCP server. SAFE/SUSPICIOUS/DANGEROUS verdict for agents.
MITSep 11, 2026 · metrics 2.10.0
PyPI · crates.io
delvinru/apk-info
Fast, malware-robust parser for Android APK/XAPK/APKM files
Apache-2.0Sep 15, 2026 · metrics 2.10.0