denoland / deno

A modern runtime for JavaScript and TypeScript.
https://deno.com
MIT License
97.03k stars 5.36k forks source link

Codesign Deno binaries on Windows #5690

Open wsporto opened 4 years ago

wsporto commented 4 years ago

I received an alert from the Avast antivirus during the upgrade of deno (from version 1.0.0 to version 1.0.1). I ran the command 'deno upgrade' from the PowerShell terminal on Windows 10 SO.

The alert says that the deno.exe was infected with IDP.HELU.PSD11

image

TheAndroidGuy commented 3 years ago

AVG Antivirus detects the same.

arisboch commented 3 years ago

It's a false positive, I got the same after updating the software update manager "RuckZuck".

TheHeadlessSourceMan commented 1 year ago

My deno install (via chocolatey) caused Drop.Win64.MemAllocSelf.240 in Avira.

Too bad. I was really looking forward to migrating to deno, but even if this is a false positive I can't risk the software I build using it kicking off users' antivirus. That would be death for my app!

csvn commented 9 months ago

I've found on Windows that Windows Security often blocks deno.exe as well, and you have to unblock it on the popup message continuously. During deno upgrade the issue often crops up again when the command runs the new file from TEMP folder.