Contribute
Contributions can improve detection accuracy, documentation, platform support, tests, and developer experience.
Report a bug
Search existing issues before opening a new report. Include:
- Scanner version and PHP version
- Command used, with credentials and private paths removed
- Expected and actual behavior
- Small reproduction steps
- Relevant report output with sensitive code removed
Report a suspicious finding
In the WordPress plugin, open the finding and select Report finding. The plugin prepares an issue with signature metadata, scanner versions, and the file SHA-256. It excludes the local file path and matched code.
For CLI installations, report the scanner version, file SHA-256, detected signature names, and observed behavior.
Do not paste malicious code or upload an executable sample to a public issue. A maintainer can arrange a private transfer after reviewing the metadata.
Submit code
Fork the repository, create a focused branch, and install development dependencies:
git clone https://github.com/your-account/PHP-Antimalware-Scanner.git
cd PHP-Antimalware-Scanner
composer install
composer test
Keep each pull request focused on one problem. Explain the user impact and list the checks you ran.
Detection changes need an inert malicious fixture, a positive test, and a representative clean fixture or negative test. The test samples must not contain an executable malicious payload.
Read the testing guide before changing matching, signatures, exploits, dangerous functions, or deobfuscation.