Repository navigation
Found Trojan when I added Gemini API to opencode after installation. #7816
Description
Description
This was the Trojan...
Trojan:Script/Wacatac.H!ml
These files were affected by the Trojan...
file: C:\Users<username>\AppData\Local\Temp.3aebb7a76c977ff5-00000000.dll
file: C:\Users<username>\AppData\Local\Temp.3aebb7a7ded7bfed-00000001.dll
Plugins
No response
OpenCode version
No response
Steps to reproduce
No response
Screenshot and/or share link
No response
Operating System
No response
Terminal
No response
Activity
github-actions commentedon Jan 11, 2026
This issue might be a duplicate of existing issues. Please check:
Trojan:Win32/Wacatac.H!mlwhen running opencode #7592: [False Positive?] Windows Defender detectsTrojan:Win32/Wacatac.H!mlwhen running opencodeThese all report similar Trojan:Win32/Wacatac.H!ml or related malware detections on Windows. Feel free to ignore if your specific case is different.
grd2006 commentedon Jan 12, 2026
yeah so apparently I fixed the issue myself I installed a previous version first (the latest currently is v1.1.13 so I installed v1.1.12) and I thought I'll use this version but opencode auto updated it to the latest version and it turns out there are no trojans found in opencode anymore so yeah it's working now
Hona commentedon Mar 29, 2026
As of OpenCode v1.3.4 across the CLI + Desktop apps, we have full code signing - so there should be no more warnings.
Please let me know otherwise