PHPackages                             nexylan/phpav - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. nexylan/phpav

ActiveLibrary[Security](/categories/security)

nexylan/phpav
=============

PHP CLI Virus/Malware Scanner

27577[9 issues](https://github.com/nexylan/PHPAV/issues)[1 PRs](https://github.com/nexylan/PHPAV/pulls)PHP

Since Dec 13Pushed 7y ago7 watchersCompare

[ Source](https://github.com/nexylan/PHPAV)[ Packagist](https://packagist.org/packages/nexylan/phpav)[ RSS](/packages/nexylan-phpav/feed)WikiDiscussions master Synced yesterday

READMEChangelogDependenciesVersions (5)Used By (0)

PHPAV
=====

[](#phpav)

PHP CLI Virus/Malware Scanner

A simple console framework for detected infected PHP files among Web servers.

@copyright [Nexylan.com](http://www.nexylan.com) - 2016

Installation
------------

[](#installation)

You can install it globally thanks to composer:

```
composer global require nexylan/phpav
```

Usage
-----

[](#usage)

### via CLI

[](#via-cli)

```
phpav /path/to/scan
```

Inspiration
-----------

[](#inspiration)

### Websites

[](#websites)

- [Malicious Code Scanner](https://github.com/mikestowe/Malicious-Code-Scanner)
- [PHP Shell Detector](https://github.com/emposha/PHP-Shell-Detector)
- [Obfuscalp](https://github.com/Orbixx/Obfuscalp)
- [Tripwire](https://github.com/lucanos/Tripwire)
- [Malicious](https://github.com/krismas/Malicious)

### Security informations

[](#security-informations)

- [How to Tell if Your PHP Site has been Hacked or Compromised](http://www.gregfreeman.org/2013/how-to-tell-if-your-php-site-has-been-compromised)
- [Exploitable PHP functions](http://stackoverflow.com/questions/3115559/exploitable-php-functions)
- [Code injection – a simple PHP virus carried in a JPEG image](http://php.webtutor.pl/en/2011/05/13/php-code-injection-a-simple-virus-written-in-php-and-carried-in-a-jpeg-image)

TODO
----

[](#todo)

- Plugins management
- Detect more shell scripts
- Create whitelist database
- Automatic fix/quarantine
- Doc

Disclaimer
----------

[](#disclaimer)

This software is provided "as is" without warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability and fitness for a particular purpose. In no event shall the author be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if the author has been advised of the possibility of such damages.

###  Health Score

25

—

LowBetter than 35% of packages

Maintenance13

Infrequent updates — may be unmaintained

Popularity20

Limited adoption so far

Community15

Small or concentrated contributor base

Maturity46

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

### Community

Maintainers

![](https://www.gravatar.com/avatar/ddfefb214260c4bfc0ecdd78842fc4b21bef42930fa8e4e55bb3a410c84baeac?d=identicon)[Soullivaneuh](/maintainers/Soullivaneuh)

![](https://avatars.githubusercontent.com/u/2728195?v=4)[Gaetan Allart](/maintainers/gallart)[@gallart](https://github.com/gallart)

![](https://avatars.githubusercontent.com/u/59648802?v=4)[Florent BOSSUYT](/maintainers/flubble)[@flubble](https://github.com/flubble)

---

Top Contributors

[![soullivaneuh](https://avatars.githubusercontent.com/u/1698357?v=4)](https://github.com/soullivaneuh "soullivaneuh (14 commits)")

### Embed Badge

![Health badge](/badges/nexylan-phpav/health.svg)

```
[![Health](https://phpackages.com/badges/nexylan-phpav/health.svg)](https://phpackages.com/packages/nexylan-phpav)
```

###  Alternatives

[mews/purifier

Laravel 5/6/7/8/9/10 HtmlPurifier Package

2.0k18.7M139](/packages/mews-purifier)[paragonie/ecc

PHP Elliptic Curve Cryptography library

24820.0k36](/packages/paragonie-ecc)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)