A script written in python that identifies suspected areas of concern which should be looked closed at in a more detailed analysis. I've used this to find malicious browser extensions that are online and used today on Firefox and other browsers.
Check out the code here: https://github.com/ernos/browser-xpi-malware-scanner
There are a few guides/tutorials there as well.
Just because there is a positive doesn't mean it is malicious. It needs further analysis.
Guides
Firefox/Browser extension malware scanner - Finding malware live on the extension stores
Started by codecave · Apr 16, 2026
only .onion links