TablePlus
Possible Malware Detected in postgresql_17.0.zip Included in DBngin for macOS
Hi DBngin Team, I’d like to report a potential security issue. After installing DBngin on macOS, my antivirus flagged the following file as malware: file_name = /Applications/DBngin.app/Contents/Resources/postgresql_17.0.zip file_hash=d064dde73caf7d1b923261e9f36cc181 To verify, I scanned the file on VirusTotal and it shows multiple detections: (Reference) https://www.virustotal.com/gui/file/e6e70461bb856db24ed3bbe8cd89606a0353e0d9c33f8550ae7e9318067b9b7b/detection Could you please review this and confirm whether the file is safe or if there’s a false positive? Let me know if you need the full file hash or any additional details. Thank you!
Hi @RiatRayendra, thank you for letting me know. However, I'm quite sure it's a false alarm. We build it on an isolated MacBook Pro, sign it, and then send it to Apple for notarization. I don't see how it could be malware.
Hi @huyphams Thank you for the explanation regarding your build and notarization process. While we understand this is likely a false positive, could you please reach out to the vendors listed on VirusTotal to report this and have the detection cleared? We prefer to remain risk-averse and have decided to postpone using DBngin until the file is explicitly reported as clean on VirusTotal.