Security Alert: Version 8.0.0 flagged and quarantined by ESET NOD32

[Virusf]

Hi @Yuvi9587,

I’m reporting a serious security concern regarding the latest release (v8.0.0).

The issue:
My local antivirus, ESET NOD32, immediately flagged and deleted the executable upon download, preventing any use of the software. To investigate further, I ran the file through VirusTotal, and it shows a detection rate of 25/70.

Details:

Version: 8.0.0

Local AV Behavior: Quarantined/Deleted by ESET NOD32.

VirusTotal Report: https://www.virustotal.com/gui/file/bca911b663a28ab936fade6c712d799d25af0e066c368e55c5191fdef81c0b65

Detections: Many vendors flag it as trojan.generickdq/wofith.

Best regards.

[Yuvi9587]

The situation where an open-source executable distributed via Github may show as false positive is quite common. When an executable is created as a standalone executable file (especially when packed with packers/bundlers or unsigned), many antivirus engines may flag it heuristically as a trojan or general malware even though the source code is publicly available and verifiable.

The project being open source means that anyone can audit, compile and verify the code on their own. Most indications found on VirusTotal result from heuristic or reputation-based engines rather than from any actual malicious behavior.

To be on the safe side, you can:

• Compile directly from source code to create an executable.
• Verify the source code before compiling into an executable.
• Whitelist file locally once verification is complete.