search

google / closure-compiler-npm

Package for managing and documenting closure-compiler for use via npm
Apache License 2.0
333 stars 66 forks source link

Nightly Build reported as a virus by Google AV #260

Closed mensfeld closed 1 year ago

mensfeld commented 2 years ago

Hey, this is probably an issue in the reporting but I wanted to give you a heads-up:

google-closure-compiler-windows - 20220926.0.0-nightly from NPM is reported as malicious by Google itself based on VirusTotal and recently updated Clamdscan signatures:

https://www.virustotal.com/gui/file/f2240b4e123fce798697e7a514fde2e0d1382d4612514cbcd25683af856ac791/detection

Raising this issue since it's Google complaining on Google

Zrzut ekranu z 2022-09-26 15-31-34

ChadKillingsworth commented 2 years ago

Interesting - this could be fun to track down.

gunan commented 2 years ago

Thanks for reporting. This is pretty black box to me. I do not have prior experience with this website or the security scanning service provided by google. Is there more information on the service, or an escalation path provided for such cases?

mensfeld commented 2 years ago

@gunan I have no idea how that works. The only thing I know is that virustotal is owned by google.

ChadKillingsworth commented 2 years ago

Just as an update, we're fairly certain this is a false positive, but to date none of us have found a way to report or address the issue with Virus Total.

mensfeld commented 2 years ago

@ChadKillingsworth had the same problem. Really hard to figure out how to reach them about a particular issue...

ChadKillingsworth commented 1 year ago

Since we apparently have no way to report this as a false positive or really take any action on it, I'm closing this issue.