Malware Scanner & File Integrity Monitor for Magento 2
Signature-based malware scanner and file integrity monitor for Magento 2. Detects webshells, PHP object-injection payloads and polyglot files using regex.
- Licence
- Open source, free to install
- Compatibility
- Magento 2.4.4 to 2.4.9, Hyvä and Luma
- Installed for you
- from $22
- Category
- Admin & security
Install
composer require mage2kishan/module-malware-scannerThen bin/magento setup:upgrade. On Packagist as mage2kishan/module-malware-scanner.
Questions about Malware Scanner & File Integrity Monitor
How is this different from a traditional antivirus?
Panth Malware Scanner is built specifically for Magento 2 filesystems, it understands the directory layout, knows which folders are writable from the frontend, and ships signatures tuned for Magento-targeted threats (Magecart skimmers, PolyShell webshells, admin-layout injection). Traditional AV tools scan everything with generic signatures and produce noise.
Does it prevent attacks or only detect them?
The Scanner module focuses on detection, quarantine, and alerting. For active prevention (upload guards, REST API filters) Panth Infotech also ships integrated firewall guards described in the module composer description.
Will it slow down my store?
No. Scans run via cron in the background. The file walker uses streaming reads and skips known-noise directories so a full scan of a typical 2.4.8 store completes in minutes, not hours.
Can I add my own signatures?
Yes. Signatures are declared in XML and merged across modules, add your own via an etc/panth_malware_signatures.xml file in a custom module.
What happens to quarantined files?
They are moved to var/panth_quarantine with full metadata. Nothing is deleted automatically, review and delete manually once confirmed malicious.
Does it work on Adobe Commerce Cloud?
Yes. The module is compatible with Adobe Commerce Cloud, quarantine path is configurable to a writable mount.
Is the source code available?
Yes. Source is on GitHub at github.com/mage2sk/module-malware-scanner.
Does it require Panth Core?
Yes. Panth_Core is a free required dependency, Composer installs it automatically.
Need Malware Scanner & File Integrity Monitor set up or extended?
Installation, configuration and custom work on any of the modules, quoted in writing within 24 hours.