current-song2
current-song2 copied to clipboard
[ATTENTION!] Potentially malicious release file in v0.1.0-alpha.8
Just fyi: Some antivirus scanners detect the binary as Gen:Variant.Lazy.324998
.
https://www.virustotal.com/gui/file/f1888ec2e0f31d25026e03d362644d0de1ce7f3ebb37b92fe53fd53c12a69bb8/detection
Thanks for opening the issue! This is a false positive. It's really hard to prove that on GitHub releases, as you don't see who uploaded a file and CI doesn't currently add a hash to verify. Here, the GitHub actions runner uploaded the file - i.e. it came straight from CI (specifically this run - build script).
My guess for why this triggered is because of the autostart prompt and the config file, or because of the global mutex to ensure only a single instance of the program exists. I'll try to investigate a bit more.
Hey, thanks for the fast Response! Just found this: https://www.f-secure.com/v-descs/lazy.shtml
That PR didn't fix this issue.