Malware was detected by Kaspersky Security Network #7506

Open
opened 2026-02-16 18:07:23 -05:00 by yindo · 1 comment
Owner

Originally created by @pprogg on GitHub (Jan 25, 2026).

Originally assigned to: @rekram1-node on GitHub.

Description

Hello, why would Kaspersky consider the opencode as malware when trying to install or update.

Image

https://threats.kaspersky.com/en/threat/UDS:DangerousObject.Multi.Generic/?acaid=2269&serial=CF7E102F-F3DD-41D3-A31E-C5D9D014A837&hwid=FFFF8F52-E10D-1AF9-75C1-51AF6CC971EA&cid=soc_org_inpr&utm_source=interceptor&utm_medium=product&utm_campaign=soc_org_inpr

Plugins

No response

OpenCode version

1.1.35 installer

Steps to reproduce

No response

Screenshot and/or share link

No response

Operating System

Windows 10

Terminal

No response

Originally created by @pprogg on GitHub (Jan 25, 2026). Originally assigned to: @rekram1-node on GitHub. ### Description Hello, why would Kaspersky consider the opencode as malware when trying to install or update. <img width="782" height="717" alt="Image" src="https://github.com/user-attachments/assets/b2bc6afb-c416-46f7-b00a-717d11d2b486" /> https://threats.kaspersky.com/en/threat/UDS:DangerousObject.Multi.Generic/?acaid=2269&serial=CF7E102F-F3DD-41D3-A31E-C5D9D014A837&hwid=FFFF8F52-E10D-1AF9-75C1-51AF6CC971EA&cid=soc_org_inpr&utm_source=interceptor&utm_medium=product&utm_campaign=soc_org_inpr ### Plugins _No response_ ### OpenCode version 1.1.35 installer ### Steps to reproduce _No response_ ### Screenshot and/or share link _No response_ ### Operating System Windows 10 ### Terminal _No response_
yindo added the windowsbug labels 2026-02-16 18:07:23 -05:00
Author
Owner

@github-actions[bot] commented on GitHub (Jan 25, 2026):

This issue might be a duplicate of existing issues. Please check:

  • #10174: Kaspersky Antivirus deletes OpenCode during in-app update (suspected false positive)
  • #9937: OpenCode update triggers Kaspersky detection (PDM:Trojan.Win32.Generic / .nblk) and app is removed
  • #7919: Windows Defender reports Trojan:Win32/Wacatac.H!ml when launching the latest version of OpenCode
  • #7736: Your installer file on your website is distributing malware
  • #8204: Windows antivirus alert when running OpenCode
  • #7669: Threat Found. Trojan:Script/Wacatac.H!ml
  • #7655: Running opencode is flagged as trojan on windows - Installed through Node Package Manager
  • #7592: [False Positive?] Windows Defender detects Trojan:Win32/Wacatac.H!ml when running opencode
  • #1103: opencode-windows-x64.zip file contains virus

Feel free to ignore if your specific case differs from these existing reports.

@github-actions[bot] commented on GitHub (Jan 25, 2026): This issue might be a duplicate of existing issues. Please check: - #10174: Kaspersky Antivirus deletes OpenCode during in-app update (suspected false positive) - #9937: OpenCode update triggers Kaspersky detection (PDM:Trojan.Win32.Generic / .nblk) and app is removed - #7919: Windows Defender reports Trojan:Win32/Wacatac.H!ml when launching the latest version of OpenCode - #7736: Your installer file on your website is distributing malware - #8204: Windows antivirus alert when running OpenCode - #7669: Threat Found. Trojan:Script/Wacatac.H!ml - #7655: Running opencode is flagged as trojan on windows - Installed through Node Package Manager - #7592: [False Positive?] Windows Defender detects `Trojan:Win32/Wacatac.H!ml` when running opencode - #1103: opencode-windows-x64.zip file contains virus Feel free to ignore if your specific case differs from these existing reports.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#7506