Built Ghost - scans processes for signs of malware injection. Catches shellcode, API hooks, process hollowing, thread hijacking, that stuff.

Works on Windows, Linux, macOS. Pretty fast, scans 200 processes in about 5 seconds. Has both command line and terminal UI.

Fair warning - you'll get false positives from browsers and game anti-cheat because they do weird memory stuff. So don't freak out if it flags Chrome.

Open source, MIT license. Drop a star if you find it useful.