frectonz / sql-studio

SQL Database Explorer [SQLite, libSQL, PostgreSQL, MySQL/MariaDB, DuckDB]
https://sql-studio.frectonz.io/
MIT License
1.51k stars 26 forks source link

Windows zip has a trojan. #5

Closed webprofusion-chrisc closed 1 week ago

webprofusion-chrisc commented 2 weeks ago

image

frectonz commented 2 weeks ago

What!?

Can anybody else confirm this? I am on linux. I have not tested the windows build.

4silvertooth commented 2 weeks ago

I confirm this. Screenshot 2024-06-17 104211

frectonz commented 2 weeks ago

Ok i wasn't aware of this, will investigate further.

webprofusion-chrisc commented 2 weeks ago

It will most likely be a false positive caused by one of your dependencies being used in an established trojan so part of your resulting executable matches the same thumbprint, but I've no idea what. Alternatively one of your dependencies could genuinely be a trojan.

4silvertooth commented 2 weeks ago

I built it it from source and it worked without any antivirus warnings.

frectonz commented 2 weeks ago

Alternatively one of your dependencies could genuinely be a trojan.

Yeah thats what i'm worried about.

ArneBachmannDLR commented 2 weeks ago

Same for me - I assume a false positive, but that's definitely not going to be installed in a company context. grafik

agamm commented 1 week ago

Looking bad on virustotal: https://www.virustotal.com/gui/file/7f03068475d962d7868e5da76712b593368f231d325debda061361a5c829d7b6/

drllz commented 1 week ago

Looking bad on virustotal: https://www.virustotal.com/gui/file/7f03068475d962d7868e5da76712b593368f231d325debda061361a5c829d7b6/

6 out of 78 scanners... not definitive, but certainly suspicious.

ilotoki0804 commented 1 week ago

image I am experiencing the same issue. Edge is not allowing me to download the file.

frectonz commented 1 week ago

From the research i did this seems to be a false positive. Installation no longer requires downloading a zip. We instead have powershell script, yall should use that instead.

https://github.com/frectonz/sqlite-studio#install-prebuilt-binaries-via-powershell-script