Top 15 Python malware-detection Projects

malware-detection

• Add a project

1. dagda

   1 4 1,233 0.0 Python

   a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities

   

2. SaaSHub

   www.saashub.com featured

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

3. malware-ioc

   2 8 319 8.3 Python

   This repository contains indicators of compromise (IOCs) of our various investigations. (by prodaft)

   

4. pandora

   3 3 280 9.0 Python

   Pandora is an analysis framework to discover if a file is suspicious and conveniently show the results (by pandora-analysis)

   

5. PRevent

   4 5 259 9.0 Python

   Prevent merging of malicious code in pull requests

   

6. yaralyzer

   5 4 150 9.8 Python

   Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.

   

7. malicious-code-ruleset

   6 4 146 7.8 Python

   Focused malicious code detection ruleset, with a high protection-to-noise ratio

   

8. DroidDetective

   7 6 137 2.5 Python

   A machine learning malware analysis framework for Android apps.

   

9. SEMA

   8 2 122 7.7 Python

   SEMA is based on angr, a symbolic execution engine used to extract API calls. Especially, we extend ANGR with strategies to create representative signatures based on System Call Dependency graph (SCDG). Those SCDGs can be exploited in machine learning modules to do classification/detection. (by csvl)

   

10. ShonyDanza

    9 1 120 1.1 Python

    A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

    

11. malwarescanner

    10 1 90 2.4 Python

    Simple Malware Scanner written in python

    

12. DeepMalwareDetector

    11 1 76 2.0 Python

    A Deep Learning framework that analyses Windows PE files to detect malicious Softwares.

    

13. CertVerify

    12 1 64 3.3 Python

    A scanner that files with compromised or untrusted code signing certificates written in python.

    

14. awesome-openclaw-security

    13 1 3 3.2 Python

    Security hardening guide, malicious skill scanner, and production configs for OpenClaw. Stop deploying naked.

    

    Project mention: Show HN: Security toolkit for OpenClaw – scanner, hardened configs, guides | news.ycombinator.com | 2026-03-08

15. file-validator

    14 1 2 5.8 Python

    Lightweight security tool to detect file extension spoofing (by AnasRm01)

    

    Project mention: Show HN: FileGuard – Detect files with fake extensions in real-time | news.ycombinator.com | 2026-02-08

16. clawhub-bridge

    15 3 0 - Python

    Security scanner for AI agent skills — 57 patterns, 13 categories, capability lattice. Zero dependencies.

    

    Project mention: I Scanned 2,000 OpenClaw Skills for Malicious Patterns — 14.5% Failed | dev.to | 2026-04-03

    I built clawhub-bridge, a security scanner that detects malicious behavioral patterns in agent skills — not code vulnerabilities, but what the skill tells the agent to do. 145 detection patterns across 42 categories, from credential exfiltration to steganographic payloads.

Python malware-detection related posts

• The Security Scanner Was the Attack Vector — How Supply Chain Attacks Hit AI Agents Differently

  1 project | dev.to | 3 Apr 2026

• PTI-257 Group Indicators of Compromise (IOCs) - PTI-257 consists of former Wizard Spider actors who are publicly known for the various malware variants they use (Ryuk, Trickbot, and Conti, among others)

  1 project | /r/blueteamsec | 14 Sep 2023

• Decryptor for PlutoCrypt Ransomware

  1 project | /r/blueteamsec | 26 May 2023

• PTI-249 Group Indicators of Compromise (IOC)

  1 project | /r/blueteamsec | 22 Feb 2023

• Vice Society Ransomware Indicators of Compromises (IOC)

  1 project | /r/blueteamsec | 16 Feb 2023

• Lockbit Green Indicators of Compromises (IOCs)

  1 project | /r/blueteamsec | 30 Jan 2023

• The Yaralyzer is a new tool for visualizing and force decoding YARA and regular expression matches in binary and text data of any kind

  1 project | /r/ReverseEngineering | 3 Oct 2022
• A note from our sponsor - SaaSHub
  www.saashub.com | 7 Jun 2026

  SaaSHub helps you find the best software and product alternatives Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

Do not miss the trending Python projects with our weekly report!