possible malware in db48 port

[Dave Allured - NOAA Affiliate]

On Tue, Jan 21, 2020 at 6:12 PM Christopher Chavez <chrischavez at gmx.us>
wrote:

> On 1/21/2020 7:03 PM, Christopher Chavez wrote:
> > VirusTotal doesn't report anything for
> > http://packages.macports.org/db48/db48-4.8.30_4.darwin_17.x86_64.tbz2:
> > see
> >
> https://www.virustotal.com/gui/url/c368d42293be904ef4710ad8ac1790b476e48ccdc8763c0267def2985222aad5/
>
> …although the report the archive itself (instead of the URL) *does*
> report a few positives, including BitDefender:
>
> https://www.virustotal.com/gui/file/20ab2a1bb6af8cf2b55a8fb5903adb3e3627fc8bd7b2f0937786be5567947629/
> ; I'm not sure why the URL report doesn't indicate this.
>

Another version of this file, recently built from source on my local Mac,
got the same 5 positives as the Macports binary version.  This does not
bode well for rebuilding as a remedy.

https://www.virustotal.com/gui/file/11faee65deeb057dfab168ad915b3f08a8a0c72eb2cf47d4fe2ea7c26c6179e1/detection

Thanks for the great tool, Chris.  I did not know about this one.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macports.org/pipermail/macports-users/attachments/20200121/396bb400/attachment.html>