google/closure-compiler-npm

`google-closure-compiler-osx/compiler` in v20240317.0.0 detected as malware by VirusTotal

cpcallen opened this issue · 3 comments

Per corp policy I uploaded node_modules/google-closure-compiler-osx/compiler to VirusTotal before upvoting in Santa. It triggered the Kingsoft malware detector for something called Script.Ks.Malware.6977.

Screenshot 2024-07-10 at 12 41 39

I re-ran the analysis just to make sure it wasn't a fluke (the original analysis had taken much longer than usual and I wondered if this failure was actually due to a timeout of some kind) but the result the second time was identical.

I suspect this is a false positive but I'm not able to establish exactly what is triggering the detector.

This has occurred before #260

It's very frustrating, but we've had little success in getting these addressed.

Unfortunate. No problem if you want to just close this report. The issue is not causing a problem, just something I thought you might want to be aware of.

I did go check to see if I could find somewhere to report a false positive to Kingsoft. I didn't find anything.