virustotal3
Python 3 implementation of the VirusTotal v3 API
What it is and what it does
virustotal3 is a Python 3 client for VirusTotal's v3 REST API, designed to wrap the API endpoints and provide convenient methods for security analysis tasks. It exposes enterprise features like Live Hunt and Retro Hunt that were unavailable in the v2 API, and handles file uploads by automatically selecting the correct endpoint based on file size (including support for files larger than 32MB).
The library has no external runtime dependencies, making installation straightforward, but it is no longer maintained—the repository was archived after the last release in August 2020. Since VirusTotal's v3 API is documented as beta and under active development, the library may break if the API changes, and there is no maintainer to issue fixes.
Use it for:
- Integrate malware and threat scanning into Python security workflows using VirusTotal's v3 endpoints.
- Automate file upload and analysis for large files (>32MB) that require a different API endpoint.
- Access enterprise-only features like Live Hunt and Retro Hunt for threat hunting and historical analysis.
- Build security monitoring tools that query VirusTotal for file and URL reputation data.
- Retrieve file relationships and metadata from VirusTotal's v3 API in a simplified, Pythonic interface.
Worth the install?
AI-flagged interpretation of the facts on this page — verify before relying
Provides a Python 3 client library for the VirusTotal v3 REST API, including enterprise features like Live Hunt, Retro Hunt, and file analysis.
No—the package is abandoned (last release August 2020, repository archived) and VirusTotal's v3 API is documented as beta with active development that may introduce breaking changes. The unclear license adds legal risk. Consider using an actively maintained alternative or calling the VirusTotal v3 API directly with a standard HTTP client.
Install
virustotal3 on PyPI
pip
pip install virustotal3uv
uv add virustotal3poetry
poetry add virustotal3Installing virustotal3
Before you install
High install friction due to no runtime dependencies but abandoned maintenance status—last release was 2020-08-17 and the repository is archived. The v3 API is documented as beta and under active development by VirusTotal, meaning breaking changes may occur without corresponding library updates.
License in practice
License treatment is unclear; no SPDX identifier or raw license text is available in the package metadata. Verify the actual license before use in proprietary or restricted contexts.
Quickstart
import os
import virustotal3.enterprise
API_KEY = os.environ['VT_API']
livehunt = virustotal3.enterprise.Livehunt(API_KEY)
rulesets = livehunt.get_rulesets()
print(rulesets)
Requires a valid VirusTotal API key set in the VT_API environment variable; the v3 API is in beta and subject to breaking changes.
Verify before relying
- Whether the package still works reliably with the current VirusTotal v3 API given its abandoned status since 2020.
- Current compatibility with modern Python 3 versions (requires_python field is empty).
- Whether recent API changes mentioned in the description (URL.get_comments, URL.get_votes) have been addressed.
Package facts
| License | not declared (unclear) |
| Python support | not specified |
| Install friction | high — source build required |
| Runtime dependencies | none |
| Maintenance | abandoned — 2,188 days since the last release |
| Last repo commit | (repository archived) |
| First released | |
| Downloads | 166,529/month — #10,490 on PyPI (30-day window, as of 2026-08-14) |
| Known vulnerabilities | none known (OSV.dev, checked 2026-08-14) |
Evidence: virustotal3-1.0.8.tar.gz
Tags
More Security packages
Provides Python bindings to the FreeDesktop.org…
permissive · top 1,000 on PyPI
msalMSAL for Python handles OAuth2 and OpenID…
permissive · top 1,000 on PyPI
joserfcjoserfc implements JOSE standards (JWS, JWE,…
permissive · top 1,000 on PyPI
AuthlibAuthlib provides a complete implementation of…
permissive · top 1,000 on PyPI
argon2-cffi-bindingsProvides low-level CFFI bindings to the…
permissive · top 1,000 on PyPI
adalADAL for Python authenticates applications with…
permissive · top 1,000 on PyPI
vt-pyOfficial Python client for the VirusTotal REST…
permissive · top 15,000 on PyPI
pymispPyMISP is a Python library that connects to…
permissive · top 5,000 on PyPI
pyClamdpyClamd provides a Python interface to the…
copyleft · top 15,000 on PyPI
yara-pythonyara-python provides a Python interface to…
permissive · top 5,000 on PyPI
alibabacloud-sas20181203Provides Python bindings to Alibaba Cloud's…
permissive · top 15,000 on PyPI
dataforseo-clientA Python client library for the DataForSEO REST…
unclear · top 15,000 on PyPI
zaproxyPython client library for the OWASP ZAP…
permissive · top 15,000 on PyPI
OTXv2OTXv2 is a Python client for AlienVault's Open…
unclear · top 15,000 on PyPI
pygitguardianAPI client library for GitGuardian's secret…
permissive · top 15,000 on PyPI
recurlyOfficial Python client library for Recurly's V3…
unclear · top 15,000 on PyPI