TESIGN
SAVED

EN · KO

  1. TESIGN / RADAR
  2. 2026.09.23
  3. MVT

MVT

Check your phone for spyware traces

WHO USES ITActivists, journalists and researchers who suspect they may be a target, and technically comfortable users who want to check their own phone.

Install to use

A forensic toolkit from Amnesty International that lets you check your own phone for signs of spyware.

INSTALL
START IN 5 MINUTES ↓
The MVT documentation homepage: a hand-holding-a-phone logo beside the project description.
The MVT documentation homepage: a hand-holding-a-phone logo beside the project description.

TESIGN TAKE

Unlike a typical antivirus app, this is the actual tool used in real spyware investigations, available for anyone to run.

Activity and discovery evidence
★ 13.7k▲ +16 / 7dDaily star increases over 14 days. Hollow bars mean no data. The last day may be partial.2026-09-09 +22026-09-10 no data2026-09-11 no data2026-09-12 no data2026-09-13 no data2026-09-14 no data2026-09-15 no data2026-09-16 no data2026-09-17 no data2026-09-18 no data2026-09-19 no data2026-09-20 no data2026-09-21 +82026-09-22 +8largest one-day increase in the 14 days+8last 14 days · stars per dayhollow = no data

13,692 stars · checked on GitHub · incl. +5 observed via GH Archive since then · 7-day +16 observed via GH Archive (as of )

RANKS SECURITY #5

AT A GLANCE

USAGE
Unconfirmed — check before use.
LANGUAGE
Python
PLATFORM
cli · macos · linux
ACTIVITY
last commit 1 day ago () · latest release [unconfirmed]
COMMUNITY
contributors [unconfirmed] · open issues [unconfirmed] · made by: [unconfirmed] Reference time unavailable
SOURCES
GitHub
FIRST SEEN
CATEGORY
SECURITY

A summary, not legal advice.

WHY IT MATTERS

Commercial spyware like Pegasus can land on a phone without a single click. MVT is the tool Amnesty International's Security Lab built during the Pegasus Project investigation — it inspects a phone's backup or system files against a public list of indicators of compromise.

BUILD FROM THIS

  • Three Python command-line tools — mvt-ios, mvt-android, mvt. Feed it an unencrypted iPhone backup, or an Android adb backup or APK set, and it checks the contents against Amnesty International's published indicators of compromise and lists what looks suspicious.

WHO IT'S FOR

Activists, journalists and researchers who suspect they may be a target, and technically comfortable users who want to check their own phone.

START IN 5 MINUTES

# Follow the install docs at mvt.re, run pip install mvt, then check an unencrypted iPhone backup or an Android adb backup.

CAVEATS

  • Command-line only, with no graphical interface — expect some technical setup. Licensed under the MVT License 1.1 (a Mozilla Public License variant), which explicitly bars using it on someone else's device without their informed consent.

RECEIPT

FIRST SEEN
AT SOURCE
KEPT
STAR DELTA
+10 ★ / 24h
CREATED → FIRST SEEN
1893d
WHEN FIRST SEEN
13,687 ★
SOURCES
GitHub

The same facts in machine-readable form — View as Markdown · JSON

SIMILAR TOOLS

Up to five from SECURITY by ★ total: edited entries first, then repository cards; this entry is highlighted. Drawn from the same stored snapshot as the rankings — a comparison, not a recommendation.

IMAGENAME★ TOTAL▲ 7dLICENSEPLATFORMLAST PUSH
The repository's own benchmark leaderboard: F1, precision, recall, time and tokens per model and review tool, in a dark table.
open-code-reviewAI code review for developers★ 39.7k▲ +828Apache-2.0permissivewindows · macos · linux · cli
An example Nuclei template: the check’s name, severity, description and CVSS score, with the actual HTTP request written out in YAML.
NucleiScan your servers for known weak spots★ 31.4k▲ +5MITpermissivecli
The MVT documentation homepage: a hand-holding-a-phone logo beside the project description.
MVTCheck your phone for spyware tracesTHIS ENTRY★ 13.7k▲ +16Licence unconfirmedunconfirmedcli · macos · linux
ente/enteCARD★ 28.9k—AGPL-3.0copyleft—
deskflow/deskflowCARD★ 28.8k—GPL-2.0copyleft—

ALSO WORTH SEEING

package-doctorFind the Python dependency to fix firstTerminal output of package-doctor scan: pillow and litellm flagged under FIX TODAY, with a list below split into replace, mitigate, upgrade and quiet.Install to use
★ 9▲ 4 HN
Scans Python dependencies and tells you which are being exploited now — and which have no one left to fix them.ZCodeRun multiple coding agents from one appThe ZCode brand card: a white ZCODE wordmark and square logo on black.Use in the browser
★ 6.3k▲ +69 / 7d
A coding workspace that runs several AI agents at once and drives a goal to completion.BlurtDictate into any Mac appThe Blurt window: the instruction to tap Right Command to start and stop, an output style setting, and a space for recent dictations.Install to use
★ 49
Hold a key, talk, and polished text lands wherever you are typing on your Mac.MonicaKeep passwords on your own deviceMonica app screens side by side: the vault list, an entry’s detail view and a themed password screen.Install to use
★ 1k
A local-first password vault for Android that also holds your 2FA codes.

TIMELINE

  1. Repository created
  2. FIRST SEEN BY TESIGN
  3. Published on TESIGN

SAME DAY

  1. 02

    AutoClip

    Auto-clip highlights from long videos

    Drop in a long video and AI finds the highlights, cutting captioned short clips automatically.

    Install to use
    ★ 8.3k▲ +27 / 7d
  2. 03

    Mac Mouse Fix

    Add trackpad gestures to any Mac mouse

    Free macOS utility that gives a cheap mouse trackpad-style gestures — three-finger swipes included.

    Install to use
    ★ 10.9k▲ +6 / 7d
  3. 04

    capcut-cli

    Edit CapCut project drafts from a CLI

    An unofficial CLI that edits CapCut/JianYing project files directly on your machine — no upload, no account.

    Install to use
    ★ 554▲ +5 / 7d
  4. 05

    aSPARK

    Gated AI product team for Claude Code

    An agile AI product team for Claude Code that gates every feature through spec, plan, build, review and QA.

    Install to use
    ★ 22▲ 1 HN
  5. 06

    ENZO

    Self-hosted chat UI for 300+ AI models

    A self-hosted chat and agent workspace that puts 300+ AI models behind your own API keys in one screen.

    Install to use
    ★ 69▲ 16 HN