Open source malware-analysis projects

Every project in the registry tagged malware-analysis, ranked by real GitHub adoption.

projects 4 combined stars ★ 60K refresh nightly
01 Anthropic-Cybersecurity-Skills ★ 33K

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud

last push19 days ago languagePython licenseApache-2.0
02 Mobile-Security-Framework-MobSF ★ 22K

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment fra

last push10 days ago languageJavaScript licenseGPL-3.0
03 GDA-android-reversing-Tool ★ 4.8K

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports mali

last push5 months ago languagePython licenseApache-2.0
04 packj ★ 693

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software suppl

last push39 hours ago languagePython licenseAGPL-3.0

Related tags

← all tags

Frequently asked questions

How many open source malware-analysis projects are there?

This registry tracks 4 projects tagged malware-analysis, with 60,281 GitHub stars between them. The most-adopted is Anthropic-Cybersecurity-Skills at 32,960 stars.

Are these malware-analysis projects free to use?

Yes — 4 of the 4 carry an explicit open-source licence across 3 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.

Which malware-analysis project should I choose?

The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.

Are these malware-analysis projects still maintained?

3 of the 4 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.