anomalyco/opencode
1
0
Fork 0
mirror of https://github.com/anomalyco/opencode.git synced 2026-07-22 02:05:26 -04:00
Code Issues 5.9k Packages Projects Releases 19 Wiki Activity

Windows Defender says Found Trojan #4754

New Issue
Open
opened 2026-02-16 17:45:17 -05:00 by yindo · 17 comments
yindo commented 2026-02-16 17:45:17 -05:00
Owner
Copy Link
Copy Source

Originally created by @PRIMExALBIN on GitHub (Jan 11, 2026).

Originally assigned to: @adamdotdevin on GitHub.

Description

This is the second time. I accidently removed the thinking it was a trojan and I had to reinstall the entire thing now it says that again

Plugins

Oh My Opencode

OpenCode version

Desktop app

Steps to reproduce

No response

Screenshot and/or share link

Image

Operating System

Windows 11

Terminal

desktop app

Originally created by @PRIMExALBIN on GitHub (Jan 11, 2026). Originally assigned to: @adamdotdevin on GitHub. ### Description This is the second time. I accidently removed the thinking it was a trojan and I had to reinstall the entire thing now it says that again ### Plugins Oh My Opencode ### OpenCode version Desktop app ### Steps to reproduce _No response_ ### Screenshot and/or share link <img width="2792" height="538" alt="Image" src="https://github.com/user-attachments/assets/8b5227dc-a001-4003-b4d3-34b6f452bf13" /> ### Operating System Windows 11 ### Terminal desktop app
yindo added the windowsbugweb labels 2026-02-16 17:45:17 -05:00
yindo commented 2026-02-16 17:45:17 -05:00
Author
Owner
Copy Link
Copy Source

@github-actions[bot] commented on GitHub (Jan 11, 2026):

This issue might be a duplicate of existing issues. Please check:

  • #3415: Windows Defender falsely flags new releases as trojans (main tracking issue for Wacatac.H!ml false positives)
  • #7816: Found Trojan when I added Gemini API to opencode after installation
  • #7655: Running opencode is flagged as trojan on windows - Installed through Node Package Manager
  • #7592: [False Positive?] Windows Defender detects Trojan:Win32/Wacatac.H!ml when running opencode
  • #7669: Threat Found. Trojan:Script/Wacatac.H!ml

Feel free to ignore if none of these address your specific case.

@github-actions[bot] commented on GitHub (Jan 11, 2026): This issue might be a duplicate of existing issues. Please check: - #3415: Windows Defender falsely flags new releases as trojans (main tracking issue for Wacatac.H!ml false positives) - #7816: Found Trojan when I added Gemini API to opencode after installation - #7655: Running opencode is flagged as trojan on windows - Installed through Node Package Manager - #7592: [False Positive?] Windows Defender detects `Trojan:Win32/Wacatac.H!ml` when running opencode - #7669: Threat Found. Trojan:Script/Wacatac.H!ml Feel free to ignore if none of these address your specific case.
yindo commented 2026-02-16 17:45:17 -05:00
Author
Owner
Copy Link
Copy Source

@PRIMExALBIN commented on GitHub (Jan 11, 2026):

Image Virus total says its a trojan

@PRIMExALBIN commented on GitHub (Jan 11, 2026): <img width="3838" height="1912" alt="Image" src="https://github.com/user-attachments/assets/941b00dd-89d1-438c-b730-230e5c01e7d1" /> Virus total says its a trojan
yindo commented 2026-02-16 17:45:17 -05:00
Author
Owner
Copy Link
Copy Source

@magicprinc commented on GitHub (Jan 11, 2026):

+1 on Windows 10

@magicprinc commented on GitHub (Jan 11, 2026): +1 on Windows 10
yindo commented 2026-02-16 17:45:17 -05:00
Author
Owner
Copy Link
Copy Source

@asvintheguy commented on GitHub (Jan 11, 2026):

+1 on Windows 11

@asvintheguy commented on GitHub (Jan 11, 2026): +1 on Windows 11
yindo commented 2026-02-16 17:45:17 -05:00
Author
Owner
Copy Link
Copy Source

@alanmcilwaine commented on GitHub (Jan 11, 2026):

+1 on Windows 11. Multiple people on our team can reproduce it by installing v1.1.13 via npm and running opencode.

@alanmcilwaine commented on GitHub (Jan 11, 2026): +1 on Windows 11. Multiple people on our team can reproduce it by installing v1.1.13 via npm and running opencode.
yindo commented 2026-02-16 17:45:17 -05:00
Author
Owner
Copy Link
Copy Source

@Akinue commented on GitHub (Jan 11, 2026):

+1 on Windows 11. Tried install via Chocolatey v1.1.13

opencode 1.1.13 Downloading opencode 64 bit from 'https://github.com/anomalyco/opencode/releases/download/v1.1.13/opencode-windows-x64.zip' Progress: 100% - Completed download of C:\Users\user\AppData\Local\Temp\chocolatey\opencode\1.1.13\opencode-windows-x64.zip (49.47 MB). Download of opencode-windows-x64.zip (49.47 MB) completed. Hashes match. Extracting C:\Users\user\AppData\Local\Temp\chocolatey\opencode\1.1.13\opencode-windows-x64.zip to C:\ProgramData\chocolatey\lib\opencode\tools... C:\ProgramData\chocolatey\lib\opencode\tools Added C:\ProgramData\chocolatey\bin\opencode.exe shim pointed to '..\lib\opencode\tools\opencode.exe'.

For completeness sake I was on 1.1.7 and uninstalled to re-install the update. Just tested 1.1.12, 1.1.11, 1.1.10 same behavior.

1.1.7, 1.1.8 work fine from chocolately (1.1.9 doesn't exist).

Image
@Akinue commented on GitHub (Jan 11, 2026): +1 on Windows 11. Tried install via Chocolatey v1.1.13 ` opencode 1.1.13 Downloading opencode 64 bit from 'https://github.com/anomalyco/opencode/releases/download/v1.1.13/opencode-windows-x64.zip' Progress: 100% - Completed download of C:\Users\user\AppData\Local\Temp\chocolatey\opencode\1.1.13\opencode-windows-x64.zip (49.47 MB). Download of opencode-windows-x64.zip (49.47 MB) completed. Hashes match. Extracting C:\Users\user\AppData\Local\Temp\chocolatey\opencode\1.1.13\opencode-windows-x64.zip to C:\ProgramData\chocolatey\lib\opencode\tools... C:\ProgramData\chocolatey\lib\opencode\tools Added C:\ProgramData\chocolatey\bin\opencode.exe shim pointed to '..\lib\opencode\tools\opencode.exe'. ` For completeness sake I was on 1.1.7 and uninstalled to re-install the update. Just tested 1.1.12, 1.1.11, 1.1.10 same behavior. 1.1.7, 1.1.8 work fine from chocolately (1.1.9 doesn't exist). <img width="355" height="70" alt="Image" src="https://github.com/user-attachments/assets/e7f0bede-e345-4d23-a90c-797650d4a31b" />
yindo commented 2026-02-16 17:45:17 -05:00
Author
Owner
Copy Link
Copy Source

@ricred commented on GitHub (Jan 11, 2026):

+1 on Windows 11. Tried install via Chocolatey v1.1.11

@ricred commented on GitHub (Jan 11, 2026): +1 on Windows 11. Tried install via Chocolatey v1.1.11
yindo commented 2026-02-16 17:45:17 -05:00
Author
Owner
Copy Link
Copy Source

@okazakov commented on GitHub (Jan 11, 2026):

Another issue raised for this here: https://github.com/anomalyco/opencode/issues/7669

@okazakov commented on GitHub (Jan 11, 2026): Another issue raised for this here: https://github.com/anomalyco/opencode/issues/7669
yindo commented 2026-02-16 17:45:18 -05:00
Author
Owner
Copy Link
Copy Source

@uoyoCsharp commented on GitHub (Jan 11, 2026):

+1 on Windows 11. downloaded the installation package from the official website on 2026/01/12.

@uoyoCsharp commented on GitHub (Jan 11, 2026): +1 on Windows 11. downloaded the installation package from the official website on 2026/01/12.
yindo commented 2026-02-16 17:45:18 -05:00
Author
Owner
Copy Link
Copy Source

@BumpyClock commented on GitHub (Jan 12, 2026):

+1

@BumpyClock commented on GitHub (Jan 12, 2026): +1
yindo commented 2026-02-16 17:45:18 -05:00
Author
Owner
Copy Link
Copy Source

@Mirrowel commented on GitHub (Jan 12, 2026):

Image Virus total says its a trojan

Actually, this says it is clean. You have barely any detections. And any detections it gets are from noname AVs or known problematic ones like google or windows

@Mirrowel commented on GitHub (Jan 12, 2026): > <img alt="Image" width="2000" height="1912" src="https://private-user-images.githubusercontent.com/214539589/534373210-941b00dd-89d1-438c-b730-230e5c01e7d1.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3NjgyMzQyNTEsIm5iZiI6MTc2ODIzMzk1MSwicGF0aCI6Ii8yMTQ1Mzk1ODkvNTM0MzczMjEwLTk0MWIwMGRkLTg5ZDEtNDM4Yy1iNzMwLTIzMGU1YzAxZTdkMS5wbmc_WC1BbXotQWxnb3JpdGhtPUFXUzQtSE1BQy1TSEEyNTYmWC1BbXotQ3JlZGVudGlhbD1BS0lBVkNPRFlMU0E1M1BRSzRaQSUyRjIwMjYwMTEyJTJGdXMtZWFzdC0xJTJGczMlMkZhd3M0X3JlcXVlc3QmWC1BbXotRGF0ZT0yMDI2MDExMlQxNjA1NTFaJlgtQW16LUV4cGlyZXM9MzAwJlgtQW16LVNpZ25hdHVyZT02ZjBkZmY2ZGU2NGNjZDE5NzQyOTRlNjdkOWM0NmNlNDMyNzczMWZmNDEwYTU1MDgzNjcwZTVjODRkMDRkMjkwJlgtQW16LVNpZ25lZEhlYWRlcnM9aG9zdCJ9.5RFd0j_8VEa1QCZrg6I2GiryvK4UWxuSuyHd07seG9k"> Virus total says its a trojan Actually, this says it is clean. You have barely any detections. And any detections it gets are from noname AVs or known problematic ones like google or windows
yindo commented 2026-02-16 17:45:18 -05:00
Author
Owner
Copy Link
Copy Source

@jackheuberger commented on GitHub (Jan 12, 2026):

+1 installed from bun

@jackheuberger commented on GitHub (Jan 12, 2026): +1 installed from bun
yindo commented 2026-02-16 17:45:18 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Jan 12, 2026):

Going to do some code signing stuff to prevent these false positives

@rekram1-node commented on GitHub (Jan 12, 2026): Going to do some code signing stuff to prevent these false positives
yindo commented 2026-02-16 17:45:18 -05:00
Author
Owner
Copy Link
Copy Source

@4cecoder commented on GitHub (Jan 12, 2026):

cloning the project trying to run from source and windows seems to remove this

opentui package may be the issue on windows getting flagged?

it seems the opentui might be:

sus

Image
@4cecoder commented on GitHub (Jan 12, 2026): cloning the project trying to run from source and windows seems to remove this opentui package may be the issue on windows getting flagged? it seems the opentui might be: # sus <img width="1116" height="304" alt="Image" src="https://github.com/user-attachments/assets/39b5b0fb-7051-42ca-a5b5-a2adc28e9aa5" />
yindo commented 2026-02-16 17:45:18 -05:00
Author
Owner
Copy Link
Copy Source

@Vagenda commented on GitHub (Jan 14, 2026):

Image Virus total says its a trojan

Actually, this says it is clean. You have barely any detections. And any detections it gets are from noname AVs or known problematic ones like google or windows

Clean means no detections. Your powers of observation are flawed, as are your dismissals.

@Vagenda commented on GitHub (Jan 14, 2026): > > <img alt="Image" width="2000" height="1912" src="https://private-user-images.githubusercontent.com/214539589/534373210-941b00dd-89d1-438c-b730-230e5c01e7d1.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3NjgyMzQyNTEsIm5iZiI6MTc2ODIzMzk1MSwicGF0aCI6Ii8yMTQ1Mzk1ODkvNTM0MzczMjEwLTk0MWIwMGRkLTg5ZDEtNDM4Yy1iNzMwLTIzMGU1YzAxZTdkMS5wbmc_WC1BbXotQWxnb3JpdGhtPUFXUzQtSE1BQy1TSEEyNTYmWC1BbXotQ3JlZGVudGlhbD1BS0lBVkNPRFlMU0E1M1BRSzRaQSUyRjIwMjYwMTEyJTJGdXMtZWFzdC0xJTJGczMlMkZhd3M0X3JlcXVlc3QmWC1BbXotRGF0ZT0yMDI2MDExMlQxNjA1NTFaJlgtQW16LUV4cGlyZXM9MzAwJlgtQW16LVNpZ25hdHVyZT02ZjBkZmY2ZGU2NGNjZDE5NzQyOTRlNjdkOWM0NmNlNDMyNzczMWZmNDEwYTU1MDgzNjcwZTVjODRkMDRkMjkwJlgtQW16LVNpZ25lZEhlYWRlcnM9aG9zdCJ9.5RFd0j_8VEa1QCZrg6I2GiryvK4UWxuSuyHd07seG9k"> Virus total says its a trojan > > Actually, this says it is clean. You have barely any detections. And any detections it gets are from noname AVs or known problematic ones like google or windows Clean means no detections. Your powers of observation are flawed, as are your dismissals.
yindo commented 2026-02-16 17:45:18 -05:00
Author
Owner
Copy Link
Copy Source

@odiseo0 commented on GitHub (Feb 4, 2026):

+1 on 1.1.51

@odiseo0 commented on GitHub (Feb 4, 2026): +1 on 1.1.51
yindo commented 2026-02-16 17:45:18 -05:00
Author
Owner
Copy Link
Copy Source

@ShanQincheng commented on GitHub (Feb 4, 2026):

+1 on 1.1.51

@ShanQincheng commented on GitHub (Feb 4, 2026): +1 on 1.1.51
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
acp
bad
bug
discussion
docs
documentation
enhancement
extension
good first issue
growth
help-wanted
mcp
model-problem
needs:compliance
nix
opentui
perf
pull-request
Mirrored from GitHub Pull Request
 tui
web
windows
zen
No Label bug web windows
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#4754
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?