# 使用 Homebrew, apk, apt, dnf, Nix, pacman, zypper 安装 malcontent 查看 malcontent 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:malcontent ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install malcontent ``` 证据: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add malcontent ``` 证据: Alpine Linux edge package indexes: malcontent from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install malcontent ``` 证据: Debian stable package indexes: malcontent from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install malcontent ``` 证据: Fedora Rawhide package metadata: malcontent from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#malcontent ``` 证据: nixpkgs package indexes: malcontent from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S malcontent ``` 证据: Arch Linux sync databases: malcontent from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install malcontent ``` 证据: openSUSE Tumbleweed package metadata: malcontent from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## 软件包事实 - **软件包键:** brew:malcontent - **软件包管理器:** Homebrew - **版本:** 1.25.7 - **来源摘要:** Supply Chain Attack Detection, via context differential analysis and YARA - **主页:** - **仓库:** - **最后更新:** 2026-07-31T21:29:29Z - **已生成:** 2026-08-03T19:37:03+00:00 ## 可执行文件 - mal (别名) ## 安装行为 - Bottle: 不可用 ## 版本和新鲜度 - 页面生成时间: 2026-08-03 - 管理器版本: 1.25.7 ## 项目历史与用法 malcontent is Chainguard's open source command-line scanner for discovering supply-chain compromises through context, differential analysis, and YARA rules. Its executable is `mal`, and the README describes analyze, diff, and scan modes for binaries, archives, directories, and OCI images. ### 项目历史 The GitHub repository was created in February 2024 and is maintained under the Chainguard organization. The README presents it as a "subtle malware discovery tool" for supply-chain attack detection, using a large embedded YARA rule set and contextual comparisons rather than only standalone signature hits. malcontent's project shape reflects the post-SolarWinds and post-3CX supply-chain security era: it is built for CI/CD use, supports container images and archives, and treats behavior changes between releases as a key signal. The README uses the 3CX compromise as an example of differential analysis surfacing newly risky behavior. ### 采用历史 Public adoption is still young but visible through the GitHub repository's releases, stars, forks, and companion GitHub Action. The README emphasizes Linux programs while noting useful coverage for other Unix platforms such as macOS and, to a lesser extent, Windows. Chainguard also references malcontent in its supply-chain security writing as a binary analysis tool that can surface newly introduced capabilities without requiring full reverse engineering. That positions it as a practical package-review tool for maintainers evaluating suspicious upstream or dependency changes. ### 使用方式 `mal analyze` enumerates capabilities in a target, `mal diff` compares two paths, archives, reports, or images, and `mal scan` reports findings above a risk threshold. It supports output formats including JSON, YAML, Markdown, text, terminal, and TUI-style output, and includes an opt-in `--oci-auth` mode for private image pulls. ### 为什么软件包爱好者会关心 malcontent matters to package maintainers because it targets the hard question a package diff raises: did this new release gain suspicious behavior? It is especially relevant to registry ecosystems, binary packages, vendored archives, container images, and CI checks where maintainers need quick triage before publishing or upgrading. ### 时间线 - 2024-02-07: The malcontent GitHub repository is created. - 2024: The README documents analyze, diff, and scan modes for supply-chain compromise discovery. - 2025: malcontent-action publishes an initial GitHub Action for PR differential scanning. - 2026: The repository lists over one hundred releases and continued active maintenance. ### Related projects - Related tools and ecosystems include YARA/YARA-X, VirusTotal rule workflows, Chainguard Images, malcontent-action, container image scanners, and CI/CD supply-chain security checks. ### 来源 - - - - - ## 安全说明 没有找到 malcontent 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。 ## 其他软件包管理器记录 - Debian apt - gir1.2-malcontent-0 - 0.13.0-2+deb13u1: normalized package name match | Debian stable package indexes: gir1.2-malcontent-0 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | GObject introspection bindings for libmalcontent | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Debian apt - gir1.2-malcontentui-1 - 0.13.0-2+deb13u1: normalized package name match | Debian stable package indexes: gir1.2-malcontentui-1 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | GObject introspection bindings for libmalcontent-ui | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Debian apt - libmalcontent-0-0 - 0.13.0-2+deb13u1: normalized package name match | Debian stable package indexes: libmalcontent-0-0 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | library for parental control of applications | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Debian apt - libmalcontent-0-dev - 0.13.0-2+deb13u1: normalized package name match | Debian stable package indexes: libmalcontent-0-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | development files for libmalcontent | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Debian apt - libmalcontent-ui-1-1 - 0.13.0-2+deb13u1: normalized package name match | Debian stable package indexes: libmalcontent-ui-1-1 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | library for parental control of applications - GTK widgets and dialogs | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Debian apt - libmalcontent-ui-dev - 0.13.0-2+deb13u1: normalized package name match | Debian stable package indexes: libmalcontent-ui-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | development files for libmalcontent-ui | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Debian apt - libpam-malcontent - 0.13.0-2+deb13u1: normalized package name match | Debian stable package indexes: libpam-malcontent from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | PAM module to control the time a user is spending on the computer | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Debian apt - malcontent - 0.13.0-2+deb13u1: normalized package name match | Debian stable package indexes: malcontent from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | framework for parental control of applications | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Debian apt - malcontent-gui - 0.13.0-2+deb13u1: normalized package name match | Debian stable package indexes: malcontent-gui from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | GUI to configure malcontent | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Nix - malcontent: normalized package name match | nixpkgs package indexes: malcontent from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - Ubuntu apt - gir1.2-malcontent-0 - 0.11.1-1build4: normalized package name match | Ubuntu 24.04 LTS package indexes: gir1.2-malcontent-0 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | GObject introspection bindings for libmalcontent | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Ubuntu apt - gir1.2-malcontentui-1 - 0.11.1-1build4: normalized package name match | Ubuntu 24.04 LTS package indexes: gir1.2-malcontentui-1 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | GObject introspection bindings for libmalcontent-ui | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Ubuntu apt - libmalcontent-0-0 - 0.11.1-1build4: normalized package name match | Ubuntu 24.04 LTS package indexes: libmalcontent-0-0 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | library for parental control of applications | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Ubuntu apt - libmalcontent-0-dev - 0.11.1-1build4: normalized package name match | Ubuntu 24.04 LTS package indexes: libmalcontent-0-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | development files for libmalcontent | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Ubuntu apt - libmalcontent-ui-1-1 - 0.11.1-1build4: normalized package name match | Ubuntu 24.04 LTS package indexes: libmalcontent-ui-1-1 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | library for parental control of applications - GTK+ widgets and dialogs | https://gitlab.freedesktop.org/pwithnall/malcontent/ - Ubuntu apt - libmalcontent-ui-dev - 0.11.1-1build4: normalized package name match | Ubuntu 24.04 LTS package indexes: libmalcontent-ui-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | development files for libmalcontent-ui | https://gitlab.freedesktop.org/pwithnall/malcontent/ ## Combined YAML source View the package source record on GitHub. [combined/malcontent.yml](https://github.com/mxcl/pkgdb/blob/main/combined/malcontent.yml) ## 来源 - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph