search

emartineau / SelectionWrapper

Wraps text depending on the key pressed, like in Visual Studio Code
MIT License
35 stars 9 forks source link

Trojan.Malware.300983.susgen #14

Open BachiMjavanadze opened 2 years ago

BachiMjavanadze commented 2 years ago

VirusTotal warns that the extension is infected with a virus:

image

emartineau commented 2 years ago

Hey, thanks for bringing this to my attention!

As far as I can tell from doing a few searches, MaxSecure isn't the most reliable AV company and apparently has a history of reporting false positives on VirusTotal. Don't know if you ran this via Hybrid Analysis, but the report shows that it clears pretty much every other check. Just in case, I did a quick scan of my PC with and didn't find anything malicious so I doubt my compiler did anything sketchy. So I'm going to assume this is just another false positive.

Here's a report of the 2019 version from the same release if you're curious. The VT scan didn't run that time (not sure how to trigger that), but it's not tripping up any well-known antiviruses so I'd say that one's fine too.

Feel free to check the source code/commit history and compile it yourself. That would be best for opsec anyways. I'm not going to bother with asking MaxSecure to update their detection methods or recompile again to see if some kind of hash change resolves it.