search

nodejs / help

:sparkles: Need help with Node.js? File an Issue here. :rocket:
1.45k stars 278 forks source link

Virus alert when installing node-v20.5.1-x64.msi #4225

Closed Faster22 closed 2 months ago

Faster22 commented 1 year ago

Details

Virus alert during install , leading to failed installation.

Node.js version

node-v20.5.1-x64.msi

Example code

image

Operating system

Edition Windows 11 Pro Version 22H2 Installed on ‎2022-‎10-‎06 OS build 22621.2134 Experience Windows Feature Experience Pack 1000.22659.1000.0

Scope

Installation failed

Module and version

Not applicable.

prettydiff commented 1 year ago

I don't think that is a user issue requiring code guidance or help. My recommendation is:

1) search the issues in https://github.com/nodejs/node repository to see if this is already reported 2) if not report this as a new issue of type security 3) contact the anti-virus vendor with the address of the new node issue

Either the anti-virus vendor is falsely identifying the memory footprint associated with that executable to a known malicious signature or there is a problem in Node that displays a memory pattern similar to a known malicious signature.

preveen-stack commented 1 year ago

submitted to avira https://www.avira.com/en/analysis/submit-url for analysis

preveen-stack commented 1 year ago

cc @nodejs/package-maintenance @nodejs/security

mcollina commented 1 year ago

cc @nodejs/releasers @nodejs/tsc PTAL

targos commented 1 year ago

Not sure what we can do. This online analysis gives 0 issues: https://www.virustotal.com/gui/file/9944eb363ac958a667d2c709fcd8bac8c93b9263c7ea50a2d381860ac6c7de85/detection

preveen-stack commented 1 year ago

suspicious behavior blocked - Memory Buffer Guess only manifesting during install and not on a file or URL scan

github-actions[bot] commented 3 months ago

It seems there has been no activity on this issue for a while, and it is being closed in 30 days. If you believe this issue should remain open, please leave a comment. If you need further assistance or have questions, you can also search for similar issues on Stack Overflow. Make sure to look at the README file for the most updated links.

github-actions[bot] commented 2 months ago

It seems there has been no activity on this issue for a while, and it is being closed. If you believe this issue should remain open, please leave a comment. If you need further assistance or have questions, you can also search for similar issues on Stack Overflow. Make sure to look at the README file for the most updated links.