Automic VaultAutomic Vault

brew

malcontent を Homebrew, apk, apt, dnf, Nix, pacman, zypper でインストール

malcontent のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストールコマンドセキュリティノート

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install malcontent

local Homebrew formula metadata

Linux

Alpine Linux apk確認済み · 92%
sudo apk add malcontent

Alpine Linux edge package indexes · malcontent · ソース: dl-cdn.alpinelinux.org

Debian apt確認済み · 92%
sudo apt install malcontent

Debian stable package indexes · malcontent · ソース: deb.debian.org

Fedora dnf確認済み · 92%
sudo dnf install malcontent

Fedora Rawhide package metadata · malcontent · ソース: dl.fedoraproject.org

Nix確認済み · 92%
nix profile install nixpkgs#malcontent

nixpkgs package indexes · malcontent · ソース: raw.githubusercontent.com

Arch Linux pacman確認済み · 92%
sudo pacman -S malcontent

Arch Linux sync databases · malcontent · ソース: geo.mirror.pkgbuild.com

openSUSE zypper確認済み · 92%
sudo zypper install malcontent

openSUSE Tumbleweed package metadata · malcontent · ソース: download.opensuse.org

概要

パッケージ概要

Supply Chain Attack Detection, via context differential analysis and YARA

コマンドとエイリアス

  • mal

履歴

プロジェクトの歴史と使われ方

malcontent is Chainguard's open source command-line scanner for discovering supply-chain compromises through context, differential analysis, and YARA rules. Its executable is `mal`, and the README describes analyze, diff, and scan modes for binaries, archives, directories, and OCI images.

プロジェクトの歴史

The GitHub repository was created in February 2024 and is maintained under the Chainguard organization. The README presents it as a "subtle malware discovery tool" for supply-chain attack detection, using a large embedded YARA rule set and contextual comparisons rather than only standalone signature hits.

malcontent's project shape reflects the post-SolarWinds and post-3CX supply-chain security era: it is built for CI/CD use, supports container images and archives, and treats behavior changes between releases as a key signal. The README uses the 3CX compromise as an example of differential analysis surfacing newly risky behavior.

採用の歴史

Public adoption is still young but visible through the GitHub repository's releases, stars, forks, and companion GitHub Action. The README emphasizes Linux programs while noting useful coverage for other Unix platforms such as macOS and, to a lesser extent, Windows.

Chainguard also references malcontent in its supply-chain security writing as a binary analysis tool that can surface newly introduced capabilities without requiring full reverse engineering. That positions it as a practical package-review tool for maintainers evaluating suspicious upstream or dependency changes.

使われ方

`mal analyze` enumerates capabilities in a target, `mal diff` compares two paths, archives, reports, or images, and `mal scan` reports findings above a risk threshold. It supports output formats including JSON, YAML, Markdown, text, terminal, and TUI-style output, and includes an opt-in `--oci-auth` mode for private image pulls.

パッケージ好きにとっての重要性

malcontent matters to package maintainers because it targets the hard question a package diff raises: did this new release gain suspicious behavior? It is especially relevant to registry ecosystems, binary packages, vendored archives, container images, and CI checks where maintainers need quick triage before publishing or upgrading.

タイムライン

  • 2024-02-07: The malcontent GitHub repository is created.
  • 2024: The README documents analyze, diff, and scan modes for supply-chain compromise discovery.
  • 2025: malcontent-action publishes an initial GitHub Action for PR differential scanning.
  • 2026: The repository lists over one hundred releases and continued active maintenance.

Related projects

  • Related tools and ecosystems include YARA/YARA-X, VirusTotal rule workflows, Chainguard Images, malcontent-action, container image scanners, and CI/CD supply-chain security checks.

セキュリティ状態

保護ツール対応はまだ見つかっていません

malcontent に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、Nucleus パッケージメタデータはここに公開されています。

インストール挙動

  • formula メタデータに Homebrew post-install フックは記録されていません。
  • Homebrew bottle メタデータは 6 個のプラットフォームターゲットで利用できます。
  • 1 件の実行時依存関係とともにインストールされます。
  • ビルドメタデータには 2 件のビルド依存関係があります。

推奨レビュー

エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
malcliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-10
マネージャ版1.25.1
マネージャ更新日2026-07-06
ローカルデータOK
上流最新
検出された最新v1.25.1

https://github.com/chainguard-dev/malcontent

  • OK鮮度警告は生成されていません。

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:malcontent
バージョン1.25.1
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/malcontent
ホームページhttps://github.com/chainguard-dev/malcontent
リポジトリhttps://github.com/chainguard-dev/malcontent
上流ドキュメントhttps://github.com/chainguard-dev/malcontent#readme
ライセンスApache-2.0
ソースアーカイブhttps://github.com/chainguard-dev/malcontent/archive/refs/tags/v1.25.1.tar.gz
最終更新2026-07-06T21:40:36Z
Pulseupdated
依存関係yara-x
ビルド依存関係go, pkgconf
Bottle利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定義
サービス宣言なし

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namemalcontent
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

Debian apt95%

gir1.2-malcontent-0 0.13.0-2+deb13u1

GObject introspection bindings for libmalcontent

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install gir1.2-malcontent-0
  • Section: introspection
  • Architecture: amd64
  • Source Package: malcontent
  • 3 依存関係
  • normalized package name match
  • 一致条件: Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: gir1.2-malcontent-0 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

gir1.2-malcontentui-1 0.13.0-2+deb13u1

GObject introspection bindings for libmalcontent-ui

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install gir1.2-malcontentui-1
  • Section: introspection
  • Architecture: amd64
  • Source Package: malcontent
  • 7 依存関係
  • normalized package name match
  • 一致条件: Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: gir1.2-malcontentui-1 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libmalcontent-0-0 0.13.0-2+deb13u1

library for parental control of applications

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-0-0
  • Section: libs
  • Architecture: amd64
  • Source Package: malcontent
  • 2 依存関係
  • normalized package name match
  • 一致条件: Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libmalcontent-0-0 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libmalcontent-0-dev 0.13.0-2+deb13u1

development files for libmalcontent

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-0-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: malcontent
  • 5 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libmalcontent-0-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libmalcontent-ui-1-1 0.13.0-2+deb13u1

library for parental control of applications - GTK widgets and dialogs

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-ui-1-1
  • Section: libs
  • Architecture: amd64
  • Source Package: malcontent
  • 8 依存関係
  • normalized package name match
  • 一致条件: Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libmalcontent-ui-1-1 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libmalcontent-ui-dev 0.13.0-2+deb13u1

development files for libmalcontent-ui

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-ui-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: malcontent
  • 14 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libmalcontent-ui-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libpam-malcontent 0.13.0-2+deb13u1

PAM module to control the time a user is spending on the computer

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libpam-malcontent
  • Section: admin
  • Architecture: amd64
  • Source Package: malcontent
  • 4 依存関係
  • normalized package name match
  • 一致条件: Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libpam-malcontent from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

malcontent 0.13.0-2+deb13u1

framework for parental control of applications

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install malcontent
  • Section: admin
  • Architecture: all
  • 6 依存関係
  • normalized package name match
  • 一致条件: Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: malcontent from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

malcontent-gui 0.13.0-2+deb13u1

GUI to configure malcontent

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install malcontent-gui
  • Section: admin
  • Architecture: amd64
  • Source Package: malcontent
  • 8 依存関係
  • normalized package name match
  • 一致条件: Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: malcontent-gui from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

malcontent

nix profile install nixpkgs#malcontent
  • normalized package name match
  • 一致条件: Malcontent
nixpkgs package indexes · raw.githubusercontent.com · nixpkgs package indexes: malcontent from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
Ubuntu apt95%

gir1.2-malcontent-0 0.11.1-1build4

GObject introspection bindings for libmalcontent

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install gir1.2-malcontent-0
  • Section: universe/introspection
  • Architecture: amd64
  • Source Package: malcontent
  • 3 依存関係
  • normalized package name match
  • 一致条件: Malcontent
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: gir1.2-malcontent-0 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

gir1.2-malcontentui-1 0.11.1-1build4

GObject introspection bindings for libmalcontent-ui

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install gir1.2-malcontentui-1
  • Section: universe/introspection
  • Architecture: amd64
  • Source Package: malcontent
  • 7 依存関係
  • normalized package name match
  • 一致条件: Malcontent
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: gir1.2-malcontentui-1 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libmalcontent-0-0 0.11.1-1build4

library for parental control of applications

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-0-0
  • Section: universe/libs
  • Architecture: amd64
  • Source Package: malcontent
  • 2 依存関係
  • normalized package name match
  • 一致条件: Malcontent
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libmalcontent-0-0 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libmalcontent-0-dev 0.11.1-1build4

development files for libmalcontent

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-0-dev
  • Section: universe/libdevel
  • Architecture: amd64
  • Source Package: malcontent
  • 3 依存関係
  • normalized package name match
  • 一致条件: Malcontent
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libmalcontent-0-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libmalcontent-ui-1-1 0.11.1-1build4

library for parental control of applications - GTK+ widgets and dialogs

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-ui-1-1
  • Section: universe/libs
  • Architecture: amd64
  • Source Package: malcontent
  • 8 依存関係
  • normalized package name match
  • 一致条件: Malcontent
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libmalcontent-ui-1-1 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libmalcontent-ui-dev 0.11.1-1build4

development files for libmalcontent-ui

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-ui-dev
  • Section: universe/libdevel
  • Architecture: amd64
  • Source Package: malcontent
  • 9 依存関係
  • normalized package name match
  • 一致条件: Malcontent
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libmalcontent-ui-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz

パッケージグラフ

リンクは、ローカルのパッケージ関係グラフ、補足データ、依存関係、エコシステム一致、パッケージハブ所属から来ています。

関連ツール

  • yara-xRuntime dependency declared by Homebrew.
  • goBuild dependency declared by Homebrew.
  • pkgconfBuild dependency declared by Homebrew.

同じワークフロー

  • minderShares av.db curated category or tags: cli, security, supply-chain-security.
  • sh4d0wupShares av.db curated category or tags: cli, security, supply-chain-security.
  • virustotal-cliShares av.db curated category or tags: cli, malware-analysis, security.
  • poutineShares av.db curated category or tags: cli, security, security-scanner, supply-chain-security.
  • yaraShares av.db curated category or tags: cli, malware-analysis, security.
  • chain-benchShares av.db curated category or tags: cli, security, supply-chain-security.

エージェント安全ガイド

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment