[GH-ISSUE #585] clamscan reports released rpm may have coinminer (even 1.30) #442

New issue

Closed

opened 2026-05-07 00:24:14 +02:00 by BreizhHardware · 3 comments

BreizhHardware commented

2026-05-07 00:24:14 +02:00

Owner

Originally created by @aappddeevv on GitHub (Jan 17, 2023).
Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/585

I'm running clamscan on ntfy binary distributed with the rpm bundle and its reporting

/usr/bin/ntfy: Unix.Packed.Coinminer-6856324-0 FOUND

Not quite sure the details. But I ran this on 1.30 as well.

Originally created by @aappddeevv on GitHub (Jan 17, 2023). Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/585 I'm running clamscan on ntfy binary distributed with the rpm bundle and its reporting ```sh /usr/bin/ntfy: Unix.Packed.Coinminer-6856324-0 FOUND ``` Not quite sure the details. But I ran this on 1.30 as well.

BreizhHardware closed this issue

2026-05-07 00:24:14 +02:00

BreizhHardware commented

2026-05-07 00:24:15 +02:00

Author

Owner

@binwiederhier commented on GitHub (Jan 17, 2023):

This is a dup of https://github.com/binwiederhier/ntfy/issues/576.
This has been addressed and will likely not happen again in the next release.

@binwiederhier commented on GitHub (Jan 17, 2023): This is a dup of https://github.com/binwiederhier/ntfy/issues/576. This has been addressed and will likely not happen again in the next release.

BreizhHardware commented

2026-05-07 00:24:15 +02:00

Author

Owner

@aappddeevv commented on GitHub (Jan 17, 2023):

My apologies. This is such a rare occurrence it did not even dawn on me to search for it already :-)

@aappddeevv commented on GitHub (Jan 17, 2023): My apologies. This is such a rare occurrence it did not even dawn on me to search for it already :-)

BreizhHardware commented

2026-05-07 00:24:15 +02:00

Author

Owner

@binwiederhier commented on GitHub (Jan 17, 2023):

It is quite annoying. upx is fantastic at making binaries a lot smaller. But somehow upx-compressed Go binaries have been getting flagged by virus scanners for years. 🤷

To be fair, for most people this does not matter, since the deliverable (deb, rpm, tarball, docker) will compress it.

@binwiederhier commented on GitHub (Jan 17, 2023): It is quite annoying. `upx` is fantastic at making binaries _a lot_ smaller. But somehow upx-compressed Go binaries have been getting flagged by virus scanners for years. :shrug: To be fair, for most people this does not matter, since the deliverable (deb, rpm, tarball, docker) will compress it.