Automic VaultAutomic Vault

brew

使用 Homebrew, apk, apt, dnf, Nix, pacman, zypper 安装 malcontent

查看 malcontent 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install malcontent

local Homebrew formula metadata

Linux

Alpine Linux apk已验证 · 92%
sudo apk add malcontent

Alpine Linux edge package indexes · malcontent · 来源: dl-cdn.alpinelinux.org

Debian apt已验证 · 92%
sudo apt install malcontent

Debian stable package indexes · malcontent · 来源: deb.debian.org

Fedora dnf已验证 · 92%
sudo dnf install malcontent

Fedora Rawhide package metadata · malcontent · 来源: dl.fedoraproject.org

Nix已验证 · 92%
nix profile install nixpkgs#malcontent

nixpkgs package indexes · malcontent · 来源: raw.githubusercontent.com

Arch Linux pacman已验证 · 92%
sudo pacman -S malcontent

Arch Linux sync databases · malcontent · 来源: geo.mirror.pkgbuild.com

openSUSE zypper已验证 · 92%
sudo zypper install malcontent

openSUSE Tumbleweed package metadata · malcontent · 来源: download.opensuse.org

概览

软件包摘要

Supply Chain Attack Detection, via context differential analysis and YARA

命令和别名

  • mal

历史

项目历史与用法

malcontent is Chainguard's open source command-line scanner for discovering supply-chain compromises through context, differential analysis, and YARA rules. Its executable is `mal`, and the README describes analyze, diff, and scan modes for binaries, archives, directories, and OCI images.

项目历史

The GitHub repository was created in February 2024 and is maintained under the Chainguard organization. The README presents it as a "subtle malware discovery tool" for supply-chain attack detection, using a large embedded YARA rule set and contextual comparisons rather than only standalone signature hits.

malcontent's project shape reflects the post-SolarWinds and post-3CX supply-chain security era: it is built for CI/CD use, supports container images and archives, and treats behavior changes between releases as a key signal. The README uses the 3CX compromise as an example of differential analysis surfacing newly risky behavior.

采用历史

Public adoption is still young but visible through the GitHub repository's releases, stars, forks, and companion GitHub Action. The README emphasizes Linux programs while noting useful coverage for other Unix platforms such as macOS and, to a lesser extent, Windows.

Chainguard also references malcontent in its supply-chain security writing as a binary analysis tool that can surface newly introduced capabilities without requiring full reverse engineering. That positions it as a practical package-review tool for maintainers evaluating suspicious upstream or dependency changes.

使用方式

`mal analyze` enumerates capabilities in a target, `mal diff` compares two paths, archives, reports, or images, and `mal scan` reports findings above a risk threshold. It supports output formats including JSON, YAML, Markdown, text, terminal, and TUI-style output, and includes an opt-in `--oci-auth` mode for private image pulls.

为什么软件包爱好者会关心

malcontent matters to package maintainers because it targets the hard question a package diff raises: did this new release gain suspicious behavior? It is especially relevant to registry ecosystems, binary packages, vendored archives, container images, and CI checks where maintainers need quick triage before publishing or upgrading.

时间线

  • 2024-02-07: The malcontent GitHub repository is created.
  • 2024: The README documents analyze, diff, and scan modes for supply-chain compromise discovery.
  • 2025: malcontent-action publishes an initial GitHub Action for PR differential scanning.
  • 2026: The repository lists over one hundred releases and continued active maintenance.

Related projects

  • Related tools and ecosystems include YARA/YARA-X, VirusTotal rule workflows, Chainguard Images, malcontent-action, container image scanners, and CI/CD supply-chain security checks.

安全态势

尚未找到受保护工具覆盖

没有找到 malcontent 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 安装时包含 1 个运行时依赖。
  • 构建元数据列出 2 个构建依赖。

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令类型暴露范围备注
malcli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-07-10
管理器版本1.25.1
管理器更新时间2026-07-06
本地数据OK
上游当前
检测到的最新版本v1.25.1

https://github.com/chainguard-dev/malcontent

  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:malcontent
版本1.25.1
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/malcontent
主页https://github.com/chainguard-dev/malcontent
仓库https://github.com/chainguard-dev/malcontent
上游文档https://github.com/chainguard-dev/malcontent#readme
许可证Apache-2.0
源码归档https://github.com/chainguard-dev/malcontent/archive/refs/tags/v1.25.1.tar.gz
最后更新2026-07-06T21:40:36Z
Pulseupdated
依赖yara-x
构建依赖go, pkgconf
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namemalcontent
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。

Debian apt95%

gir1.2-malcontent-0 0.13.0-2+deb13u1

GObject introspection bindings for libmalcontent

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install gir1.2-malcontent-0
  • Section: introspection
  • Architecture: amd64
  • Source Package: malcontent
  • 3 依赖
  • normalized package name match
  • 匹配方式：Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: gir1.2-malcontent-0 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

gir1.2-malcontentui-1 0.13.0-2+deb13u1

GObject introspection bindings for libmalcontent-ui

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install gir1.2-malcontentui-1
  • Section: introspection
  • Architecture: amd64
  • Source Package: malcontent
  • 7 依赖
  • normalized package name match
  • 匹配方式：Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: gir1.2-malcontentui-1 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libmalcontent-0-0 0.13.0-2+deb13u1

library for parental control of applications

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-0-0
  • Section: libs
  • Architecture: amd64
  • Source Package: malcontent
  • 2 依赖
  • normalized package name match
  • 匹配方式：Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libmalcontent-0-0 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libmalcontent-0-dev 0.13.0-2+deb13u1

development files for libmalcontent

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-0-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: malcontent
  • 5 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libmalcontent-0-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libmalcontent-ui-1-1 0.13.0-2+deb13u1

library for parental control of applications - GTK widgets and dialogs

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-ui-1-1
  • Section: libs
  • Architecture: amd64
  • Source Package: malcontent
  • 8 依赖
  • normalized package name match
  • 匹配方式：Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libmalcontent-ui-1-1 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libmalcontent-ui-dev 0.13.0-2+deb13u1

development files for libmalcontent-ui

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-ui-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: malcontent
  • 14 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libmalcontent-ui-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libpam-malcontent 0.13.0-2+deb13u1

PAM module to control the time a user is spending on the computer

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libpam-malcontent
  • Section: admin
  • Architecture: amd64
  • Source Package: malcontent
  • 4 依赖
  • normalized package name match
  • 匹配方式：Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libpam-malcontent from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

malcontent 0.13.0-2+deb13u1

framework for parental control of applications

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install malcontent
  • Section: admin
  • Architecture: all
  • 6 依赖
  • normalized package name match
  • 匹配方式：Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: malcontent from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

malcontent-gui 0.13.0-2+deb13u1

GUI to configure malcontent

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install malcontent-gui
  • Section: admin
  • Architecture: amd64
  • Source Package: malcontent
  • 8 依赖
  • normalized package name match
  • 匹配方式：Malcontent
Debian stable package indexes · deb.debian.org · Debian stable package indexes: malcontent-gui from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

malcontent

nix profile install nixpkgs#malcontent
  • normalized package name match
  • 匹配方式：Malcontent
nixpkgs package indexes · raw.githubusercontent.com · nixpkgs package indexes: malcontent from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
Ubuntu apt95%

gir1.2-malcontent-0 0.11.1-1build4

GObject introspection bindings for libmalcontent

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install gir1.2-malcontent-0
  • Section: universe/introspection
  • Architecture: amd64
  • Source Package: malcontent
  • 3 依赖
  • normalized package name match
  • 匹配方式：Malcontent
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: gir1.2-malcontent-0 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

gir1.2-malcontentui-1 0.11.1-1build4

GObject introspection bindings for libmalcontent-ui

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install gir1.2-malcontentui-1
  • Section: universe/introspection
  • Architecture: amd64
  • Source Package: malcontent
  • 7 依赖
  • normalized package name match
  • 匹配方式：Malcontent
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: gir1.2-malcontentui-1 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libmalcontent-0-0 0.11.1-1build4

library for parental control of applications

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-0-0
  • Section: universe/libs
  • Architecture: amd64
  • Source Package: malcontent
  • 2 依赖
  • normalized package name match
  • 匹配方式：Malcontent
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libmalcontent-0-0 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libmalcontent-0-dev 0.11.1-1build4

development files for libmalcontent

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-0-dev
  • Section: universe/libdevel
  • Architecture: amd64
  • Source Package: malcontent
  • 3 依赖
  • normalized package name match
  • 匹配方式：Malcontent
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libmalcontent-0-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libmalcontent-ui-1-1 0.11.1-1build4

library for parental control of applications - GTK+ widgets and dialogs

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-ui-1-1
  • Section: universe/libs
  • Architecture: amd64
  • Source Package: malcontent
  • 8 依赖
  • normalized package name match
  • 匹配方式：Malcontent
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libmalcontent-ui-1-1 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libmalcontent-ui-dev 0.11.1-1build4

development files for libmalcontent-ui

https://gitlab.freedesktop.org/pwithnall/malcontent/

sudo apt install libmalcontent-ui-dev
  • Section: universe/libdevel
  • Architecture: amd64
  • Source Package: malcontent
  • 9 依赖
  • normalized package name match
  • 匹配方式：Malcontent
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libmalcontent-ui-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

相关工具

  • yara-xRuntime dependency declared by Homebrew.
  • goBuild dependency declared by Homebrew.
  • pkgconfBuild dependency declared by Homebrew.

相同工作流

  • minderShares av.db curated category or tags: cli, security, supply-chain-security.
  • sh4d0wupShares av.db curated category or tags: cli, security, supply-chain-security.
  • virustotal-cliShares av.db curated category or tags: cli, malware-analysis, security.
  • poutineShares av.db curated category or tags: cli, security, security-scanner, supply-chain-security.
  • yaraShares av.db curated category or tags: cli, malware-analysis, security.
  • chain-benchShares av.db curated category or tags: cli, security, supply-chain-security.

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment