Observed arrival · 2026-10-24
WPSniffer: a command-line malware scanner for WordPress
WPSniffer scans WordPress and PHP files with YARA rules, then produces text, CSV, TSV, or email reports.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- WordPress administrators and PHP site operators
- Worth noticing
- The default YARA Forge core package is described as containing about 5,000 rules; extended and full packages trade broader coverage for more false-positive noise.
Field notes
The examples show installation in a Python virtual environment and include commands for scanning one site, counting WordPress sites, and scanning recently changed files. Operators can pin a YARA Forge release for reproducibility or use custom rules without downloading a package. The page says rule authors are credited in reports; its sample file paths and detections are illustrative rather than evidence of a live scan.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue