{"adoption": {"forks": 2097, "observed_at": "2026-08-28T04:11:27.014092+00:00", "stars": 18675}, "canonical_url": "https://ross.abutalabs.com/products/malwaresourcecode", "card": {"archived": false, "artifact_type": "dataset", "description": "Collection of malware source code for a variety of platforms in an array of different programming languages.", "domain": ["security", "penetration-testing", "reverse-engineering", "operating-systems"], "enriched": true, "function": ["security", "reverse-engineering", "developer-tools"], "health_score": 71, "homepage": "https://vx-underground.org", "language": "Assembly", "license": null, "license_family": "other", "maturity": "active", "member_repos": ["vxunderground/MalwareSourceCode"], "name": "vxunderground/MalwareSourceCode", "platform": ["windows", "cross-platform"], "pushed_at": "2026-05-30T07:11:00+00:00", "repo": "vxunderground/MalwareSourceCode", "stars": 18675, "tags": ["malware", "malware-research", "malware-source-code", "vx-underground", "security-research", "dataset", "linux", "macos", "android"], "topics": ["malware", "malware-research", "malware-development", "malware-detection"], "urls": [], "use_cases": ["study malware source code to learn how infectors and rootkits work", "research malware families like Mirai spin-offs for detection research", "build and test antivirus or EDR detection signatures against real malware implementations", "analyze historical ransomware and botnet code for academic papers", "find reference implementations of bootkits, crypters, and stealers", "collect phishing page samples for security awareness training"], "what_it_is": "A large curated collection of malware source code spanning many platforms (Windows, Linux, Android, macOS, MS-DOS, PHP, Java, and more) and programming languages, maintained by vx-underground. It serves as a research reference archive for malware analysts, reverse engineers, and security researchers.", "when_to_avoid": ["you want production security tooling or defensive software to deploy", "you need a maintained library with a license permitting reuse in your own projects (no license is provided)", "you are looking for a sandbox or analysis platform rather than raw source code", "you cannot safely handle malicious code or lack authorization to study it"], "when_to_choose": ["you need a broad, organized archive of malware source across many platforms and languages", "you are a security researcher or malware analyst studying offensive techniques", "you want historical/legacy malware code (Win9x, MS-DOS, Symbian) for research", "you need reference samples to develop detection or reverse-engineering skills"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/malwaresourcecode", "repo": "vxunderground/MalwareSourceCode", "role": "main", "score": 70}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:11:27.014092+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T17:01:20.391802+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1336546e869254ae28709386ddf27baf485b50461d4b8f33740643c98538ecba", "fetched_at": "2026-08-28T04:11:27.014092+00:00", "kind": "readme", "missing": false, "url": "https://github.com/vxunderground/MalwareSourceCode"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:11:27.014092+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T17:01:20.391802+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1336546e869254ae28709386ddf27baf485b50461d4b8f33740643c98538ecba", "fetched_at": "2026-08-28T04:11:27.014092+00:00", "kind": "readme", "missing": false, "url": "https://github.com/vxunderground/MalwareSourceCode"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T17:01:20.391802+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1336546e869254ae28709386ddf27baf485b50461d4b8f33740643c98538ecba", "fetched_at": "2026-08-28T04:11:27.014092+00:00", "kind": "readme", "missing": false, "url": "https://github.com/vxunderground/MalwareSourceCode"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:11:27.014092+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:11:27.014092+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:11:27.014092+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T17:01:20.391802+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1336546e869254ae28709386ddf27baf485b50461d4b8f33740643c98538ecba", "fetched_at": "2026-08-28T04:11:27.014092+00:00", "kind": "readme", "missing": false, "url": "https://github.com/vxunderground/MalwareSourceCode"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:11:27.014092+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:11:27.014092+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T17:01:20.391802+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1336546e869254ae28709386ddf27baf485b50461d4b8f33740643c98538ecba", "fetched_at": "2026-08-28T04:11:27.014092+00:00", "kind": "readme", "missing": false, "url": "https://github.com/vxunderground/MalwareSourceCode"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:11:27.014092+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:11:27.014092+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:11:27.014092+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T17:01:20.391802+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1336546e869254ae28709386ddf27baf485b50461d4b8f33740643c98538ecba", "fetched_at": "2026-08-28T04:11:27.014092+00:00", "kind": "readme", "missing": false, "url": "https://github.com/vxunderground/MalwareSourceCode"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:11:27.014092+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:11:27.014092+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T17:01:20.391802+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1336546e869254ae28709386ddf27baf485b50461d4b8f33740643c98538ecba", "fetched_at": "2026-08-28T04:11:27.014092+00:00", "kind": "readme", "missing": false, "url": "https://github.com/vxunderground/MalwareSourceCode"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T17:01:20.391802+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1336546e869254ae28709386ddf27baf485b50461d4b8f33740643c98538ecba", "fetched_at": "2026-08-28T04:11:27.014092+00:00", "kind": "readme", "missing": false, "url": "https://github.com/vxunderground/MalwareSourceCode"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T17:01:20.391802+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1336546e869254ae28709386ddf27baf485b50461d4b8f33740643c98538ecba", "fetched_at": "2026-08-28T04:11:27.014092+00:00", "kind": "readme", "missing": false, "url": "https://github.com/vxunderground/MalwareSourceCode"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T17:01:20.391802+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "1336546e869254ae28709386ddf27baf485b50461d4b8f33740643c98538ecba", "fetched_at": "2026-08-28T04:11:27.014092+00:00", "kind": "readme", "missing": false, "url": "https://github.com/vxunderground/MalwareSourceCode"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 85, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": ["no_releases", "no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2153, "days_push": 95, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 70, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}