How to contribute

If this project helped you out, please support us with a star ⭐

Have an idea? Found a bug? Please raise to ISSUES or PULL REQUEST. Contributions are welcome and are greatly appreciated! Every little bit helps.

How to report malware

Acquiring samples of malicious code enables us to provide this protection to recognize new threats before they can infect your environment.

If the WordPress plugin detects a suspicious file, open the report finding and select Report finding. The plugin drafts a formatted public issue from legacy matches or canonical malware file signatures, containing the signature names, detection types, scanner versions, and validated file SHA-256. It does not include the local path or matched code.

For other installations, open an ISSUE with the scanner version, file SHA-256, detected signatures, and a description of the suspicious behavior.

Do not paste or attach executable malware to a public issue. If the sample is needed, a maintainer can arrange a private transfer after reviewing the metadata.

If you have a pattern/definition to find this malicious code yet, you can create PULL REQUEST adding the dangerous function, exploit or signature to the related collection file. After that your pull request will be analyzed and after approved or reviewed.