global-land-mask icon indicating copy to clipboard operation
global-land-mask copied to clipboard

Malware in the package, do not execute

Open iklobato opened this issue 3 years ago • 1 comments

In one of the first lines of the globe.py file a malicious compressed file called globe_combined_mask_compressed.npz is loaded in path.

Screen Shot 2021-11-02 at 23 11 09

It is responsible for loading the file into memory.

_mask_filename = os.path.join(_path,'globe_combined_mask_compressed.npz')
_mask_fid = np.load(_mask_filename)

I found it strange a coordinate calculation using a hidden library, and decided to pass the file in the VirusTotal website. This library when executed is malicious and contains malware. Screen Shot 2021-11-02 at 23 11 37

HERE IS the link

iklobato avatar Nov 03 '21 02:11 iklobato

Definitely a false positive.

n0kovo avatar Aug 03 '22 23:08 n0kovo