Malware Detection Python Packages

quark-engine

An Obfuscation-Neglect Android Malware Scoring System

anyrun-sdk

Simplify integration with ANY.RUN REST API services

apkid

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

repo-proofer

Find out if a repo will steal your keys before you run it. Zero-network sandbox + strace exfil detection. 100% deterministic, no AI. `uvx repo-proofer <url>

aisbom-cli

AI SBOM: AI Software Bill of Materials - The Supply Chain for Artificial Intelligence

argus-security

Argus brings “a hundred eyes” to your project, combining leading open source security tools into a scalable, automated, continuous security pipeline.

bayyinah

File integrity scanner detecting hidden, concealed, or adversarial content across 23 file kinds. Input-layer application of the Munafiq Protocol

yaralyzer

Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.

yarobot

Simple YARA rules generator with web interface, API, and cli

shai-hulud-detector

A CLI security scanner that detects GitHub accounts compromised by the “Sha1-Hulud: The Second Coming” npm supply-chain worm.

nodesafe

Security scanner for ComfyUI custom nodes and node-based workflow plugins. Static analysis pipeline + ML, OSS Apache 2.0.

malwar

Static analysis engine for detecting malware in agentic AI skill files

mrextractor

A library for binaries feature extraction

clawhub-bridge

Security scanner for AI agent skills — 145 patterns, capability lattice, delta risk, policy encoding. Zero dependencies.

anyrun-legacy

This is the official Python client library for ANY.RUN. Automate management of ANY.RUN REST endpoints

ak-apkid

Android Package Identifier

masc

A malware web scanner

nodesafes

Defensive registration. The real package is 'nodesafe'.

pynodesafe

Defensive registration. The real package is 'nodesafe'.

safe-exec

Deobfuscate and inspect code passed into exec() and eval()

pegacorn

Pegacorn is a malware analysis framework

kasperskytip

Kaspersky TIP unofficial API for Python

pkl-inspector

Static analysis for Python pickle files — detects malicious code without executing it

stoq-framework

An open source framework for enterprise level automated analysis.