Open elmarbransch opened 8 months ago
Thank you for bringing this to my attention. I understand your concern regarding the detection of malware in the downloadable version of the code. The detection you're experiencing is a false positive, as it's not uncommon for certain antivirus programs to flag legitimate code as suspicious due to patterns or behaviors that resemble malware.
windows defender also detects the downloadable release as a PHP:backdoor
The downloadable version in the dist folder has been detected by clamav as malware.
If you look into the file, there are nearly 300 lines of code in the beginning that look suspicious. It might only download patterns and other necessary stuff with this section - it did not reverse engineered it...
I was only informed by our ISP about this finding - it did not scan myself and thus cannot provide the details at this time.
Is this a known issue?
thanks