pypa / hatch

Modern, extensible Python project management
https://hatch.pypa.io/latest/
MIT License
6.11k stars 310 forks source link

AV triggered when run `hatch shell` #1593

Closed Diogo-Rossi closed 5 months ago

Diogo-Rossi commented 5 months ago

First of all, I'm very new using hatch and I have enjoyed it so much til now. Thank you all for this great tool!

However, yesterday I got this annoying problem: After spawning an shell and creating an environment, some minutes pass and my anti-virus is triggering some files as malware behaviour, and excluding them.

I generally put my projects environments in the project root directory, i.e., my config.toml file has the following:

[dirs.env]
virtual = ".venv"

I'm using Windows 10 and my AV software in Kaspersky.

This happened when I run the command hatch shell. After that, many warnings are raised and some files (activate.ps1 and the interpreter python.exe, among others) are excluded.

Does anyone have a similar problem? Is this a very weird false positive?

ofek commented 5 months ago

yes this is a false positive and there is nothing we could do about that

Diogo-Rossi commented 5 months ago

yes this is a false positive and there is nothing we could do about that

Ok. Did this happen before? With some other AV software?

ofek commented 5 months ago

Not often. Your project probably requires a dependency that ships an extension module (compiled code) and a new version may have been just released to PyPI which is the usual cause. Try again in a few hours perhaps.

Diogo-Rossi commented 5 months ago

Ok. Thanks for the advice!