Skip to content

Avast detects 20.11.1 as malware #47

Closed

Description

@ttodua

What version of pkg are you using?

5.11.5

What version of Node.js are you using?

20.12.1

What operating system are you using?

Win 11

What CPU architecture are you using?

x64

What Node versions, OSs and CPU architectures are you building for?

windows

Describe the Bug

2024-04-04 22 34 16

Expected Behavior

it shouldn't detect as virus

To Reproduce

you need to have avast free antivirus installed,
then do pkg .

Activity

  1. changed the title [-]Avast detects 20.11.1 it as malware[/-] [+]Avast detects 20.11.1 as malware[/+] on Apr 4, 2024
  2. ttodua commented on Apr 4, 2024

    @ttodua
    Author

    btw, how can i tell pkg to use other version instead of 20.11.1 ?

  3. robertsLando commented on Apr 5, 2024

    @robertsLando
    Member

    Sincerly I don't think there is much we can do here

  4. robertsLando commented on Apr 5, 2024

    @robertsLando
    Member

    btw, how can i tell pkg to use other version instead of 20.11.1 ?

    Specify another target or downgrade pkg to use older versions

  5. ttodua commented on Apr 5, 2024

    @ttodua
    Author

    Specify another target

    i use --target=win , what do you mean in different target plz?

    downgrade pkg to use older versions

    Do you see it an easy optionality to be added, to specific the version during packaging itself, so we could i.e. pkg --node-version 20.8.2? if it's easy thing to add I could pushed a PR, just I am not familiar with this repo and it might take me some time

  6. robertsLando commented on Apr 5, 2024

    @robertsLando
    Member

    actually it's not possible to provide a custom exec to use for the package but yeah you could send a PR if you want

  7. ttodua commented on Apr 5, 2024

    @ttodua
    Author

    actually it's not possible to provide a custom exec to use for the package but yeah you could send a PR if you want

    would you share 2 words - is it enough just to change the download file version, or it would also need to entail other logical changes across other files?

  8. ttodua commented on Apr 5, 2024

    @ttodua
    Author

    also, should I seek that change pkg itself or or pkg-fetch?

  9. robertsLando commented on Apr 5, 2024

    @robertsLando
    Member

    I think it should be done on pkg side as pkg-fetch is used only to fetch the binary and in your case you want to override exactly this part

  10. AwesomeKalin commented on May 24, 2024

    @AwesomeKalin

    It's just a false positive, they happen

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions