rfxn/linux-malware-detect

Health v2 · maintenance only

Adoption not part of the score

1490 stars · 247 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Linux Malware Detect (LMD) is a bash-based malware scanner for Linux servers featuring a multi-stage detection pipeline (MD5/SHA-256 hashing, HEX pattern matching, YARA rules, and statistical analysis) with ClamAV integration. It provides real-time inotify file monitoring, quarantine/clean/restore operations, and multi-channel alerting via email, Slack, Discord, and Telegram.

Use cases

• scan a linux server for malware and web shells
• detect injected backdoors on a shared hosting server
• monitor directories in real time for malicious file changes
• scan uploaded files with modsecurity inspectfile hook
• export custom malware signatures to clamav
• quarantine and clean infected files automatically
• get slack or telegram alerts when malware is found

When to choose

• you run linux servers, especially shared hosting, and need a lightweight pure-bash malware scanner
• you want real-time inotify monitoring plus multi-engine detection without heavy agents
• you need quarantine, alerting, and ClamAV signature export in one tool

When to avoid

• you need endpoint protection on non-Linux platforms
• you require a GUI-managed enterprise EDR with centralized fleet management
• you need real-time process/memory forensics rather than file scanning

Facets

cli-tool · maturity active

security monitoring alerting cli security operating-systems self-hosted cli malware-scanner clamav yara inotify quarantine bash shared-hosting webshell-detection malware-detection web-hosting linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="rfxn/linux-malware-detect")