search

Steamopollys / Steamodded

A Balatro ModLoader
GNU General Public License v3.0
188 stars 42 forks source link

VirusTotal detections #150

Closed BREDEN444 closed 1 month ago

BREDEN444 commented 1 month ago

Screenshot 2024-07-01 112121 I downloaded the correct source code.zip file and I wanted to be safe, so I decided to scan the file with Virus Total. There are 7/65 detections. 7 ENGINES detected this as unsafe. a will not install this until at least 6 more engines say it's safe.

ChromaPIE commented 1 month ago

then don't install this

Aurelius7309 commented 1 month ago

firefox_VlABVrIudC This project is open source, so you don't need to trust anyone telling you it's safe. The reason Steamodded 0.9.8 and below are commonly flagged by virus detectors is because it behaves like a Trojan, i.e., it directly modifies the game's executable file to allow mods to be injected. The files that cause this are completely unused when installing Steamodded using Lovely, but they were still present at the time 0.9.8 was released.

This method of injection will no longer be supported as of the current alpha test of version 1.0.0, so these files have since been removed from the repository. You can confirm this is the case by scanning the current state of the main branch instead of the release (as I did here) to confirm all vendors mark this version as safe, or deleting the relevant files in your 0.9.8 download and doing the same thing.