search

BabylonJS / Exporters

Exporters for Babylon.js and gltf file formats
Other
604 stars 312 forks source link

A security issue was included in Install.zip. #1068

Open satoy11 opened 2 years ago

satoy11 commented 2 years ago

Hi, I saw a security warning when I downloaded the following version of Install.zip. CD Release 20220628.14 -> Trojan:Script/Conteban.A!ml CD Release 20220628.1 -> Trojan:Script/Wacatac.B!ml

bghgary commented 2 years ago

Which software is reporting this?

BigRoy commented 1 year ago

I've hit this same issue and got this report from Windows 10's native Virus & Threat protection. I however did get a different Trojan warning:

Trojan:Script/Sabsik.TE.B!ml
Trojan:Script/Ulthar.A!ml

Both with the now latest release CD Release 20220923.2 Installer.zip

It forced me to actually avoid the installer completely and instead deploy the maya plug-in manually as a maya module (.mod) with something like this:

+ babylonjs 1.0 .
MAYA_CUSTOM_TEMPLATE_PATH +:= NETemplates
MAYA_CUSTOM_TEMPLATE_PATH +:= AETemplates
plug-ins +:= plug-ins

And have maya just point to the folder of that .mod file instead.

bghgary commented 1 year ago

I can repro and will send the file to the defender team to see if it's a false positive.

bghgary commented 1 year ago

Related: #1051