malcontent

Detects supply-chain compromises in binaries via YARA-based differential analysis.

Desktopfree

malcontent is an open-source command-line tool that scans binaries, archives, and container images for supply-chain compromises using thousands of YARA rules. It offers differential analysis to flag risky new behavior introduced between software releases, unfiltered capability analysis, and threshold-based scanning, and is built to run inside CI/CD pipelines. Aimed at security engineers securing their build and release process.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of malcontent - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim malcontent to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether malcontent (or something else) actually fits.

Try a problem