Repository containing malicious files

[flipp33r]

Hi, I hate to be a bearer of bad news, but it looks like this repository contains malware that you are likely not aware of. Please treat this as a friendly notification. I suggest you to investigate origin of the below-mentioned file(s) and assume all systems involved in building or running your NetBeans project(s) to be fully compromised. I also suggest you to review all your other repositories and NetBeans projects for presence of similar files.

Suspicious file(s):

• https://github.com/nk-fouque/pacman-java_ia/blob/master/Pacman/nbproject/cache.dat - This is a malicious file intended to install additional malware on a system and/or modify NetBeans projects (see VirusTotal: https://www.virustotal.com/gui/file/a7d664bff764bfc2cc6b13c15b2d7d7f09d0e55f0c376a81b64644d85ebe1e0b/detection)
• https://github.com/nk-fouque/pacman-java_ia/blob/master/Pacman/nbproject/build-impl.xml#L957 - This is a modified build-impl.xml file intended to run malicious JAR file cache.dat every time a project is build

Cheers, Flipper

[nk-fouque]

Thankfully we never really built the project with those files, and we only copied the Java code to be run by our IDE. Deleted incriminated files for now, will delete the whole useless folder whenever. Thanks Flipper Best, Nick