current-song2 icon indicating copy to clipboard operation
current-song2 copied to clipboard

[ATTENTION!] Potentially malicious release file in v0.1.0-alpha.8

Open Spacelord09 opened this issue 1 year ago • 3 comments

Just fyi: Some antivirus scanners detect the binary as Gen:Variant.Lazy.324998.

https://www.virustotal.com/gui/file/f1888ec2e0f31d25026e03d362644d0de1ce7f3ebb37b92fe53fd53c12a69bb8/detection

Spacelord09 avatar May 29 '23 14:05 Spacelord09

Thanks for opening the issue! This is a false positive. It's really hard to prove that on GitHub releases, as you don't see who uploaded a file and CI doesn't currently add a hash to verify. Here, the GitHub actions runner uploaded the file - i.e. it came straight from CI (specifically this run - build script).

My guess for why this triggered is because of the autostart prompt and the config file, or because of the global mutex to ensure only a single instance of the program exists. I'll try to investigate a bit more.

Nerixyz avatar May 29 '23 16:05 Nerixyz

Hey, thanks for the fast Response! Just found this: https://www.f-secure.com/v-descs/lazy.shtml

Spacelord09 avatar Jun 04 '23 22:06 Spacelord09

That PR didn't fix this issue.

Nerixyz avatar Aug 03 '23 17:08 Nerixyz