Hacker GitHub

← All repos

ernos/browser-xpi-malware-scanner

View on GitHub ↗ ★ 9 Python

A comprehensive browser extension (.xpi) malware scanner which checks for many common malware tricks like:, credential-stealers obfuscation tactics, steganography, base64 payloads, zip-tricks, remote-code execution, polyglot tricks, meta data tricks in an attempt to give the analysist information about where deeper analysis is needed.

4 mentions on Hacker News by 2 people: 1 story, 3 comments · first 2026-04-02 · latest 2026-06-23

Mentions per year 4 mentions · busiest year 2026 (4)
20082026
AllStoriesComments NewestTopOldest
  1. ▲ 2
    A Python tool to scan browser extension packages for malware
    story by pebnop · 2026-06-23 · 1 comment
  2. …made a scanner in python which helps with determining if it is malicious or not. * [Here is the scanner www.github.com/ernos/browser-xpi-malware-scanner]( https://www.github.com/ernos/browser-xpi-malware-scanner ) * [First malicious…
    comment by ernos · 2026-04-11
  3. …ttps://www.yourdev.net/blog.php?post=extension-malware-in-t... and the scanner on my github here: https://www.github.com/ernos/browser-xpi-malware-scanner
    comment by ernos · 2026-04-09
  4. This is a deep dive analysis of how to use browser-xpi-malware-scanner.py ( https://github.com/ernos/browser-xpi-malware-scanner ) to find live malware on the firefox extension store (or other browsers). I installed 10~ random extensions…
    comment by ernos · 2026-04-02 · in Deep dive analysis of browser extension malware live on Firefox extension store