Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Nanoid.dll from net45 targeting NuGet is flagged as malicious file by Cynet #7

Open
syedsuhaib opened this issue Apr 25, 2023 · 2 comments

Comments

@syedsuhaib
Copy link

Please see the VirusTotal report: https://www.virustotal.com/gui/file/59c0ba80f314e609da3647b9e1d7aba6cae1f583e356280d1e13eae967cb78d5/detection

The dll was taken from NuGet dependency in a net45 targeting project. Not sure whether the issue is specific to the dotnet fork or the main project. Opening this issue here to make sure everything is all right since NanoId is probably the most popular library from id generation out there.

Any inputs on this from the contributors here or anyone else would be highly appreciated.

@syedsuhaib
Copy link
Author

@codeyu, do we have sufficient contributors to take a look at the open issues here? There seem to be no updates on most issues for months now.

@SasLuca
Copy link
Contributor

SasLuca commented Dec 30, 2023

@syedsuhaib I tried looking into this but the website doesn't really explain what the issue is.

It seems to me from reading various things is that it might just be complaining about one of the target .net versions having security vulnerabilities, or it might be complaining about this "Missing file signature" thing in the details section but I have no idea what that is about.

All in all, I think without more info this issue might be worth just closing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants