[keycloak-dev] Trojan in Keycloak Javascript Adapter?

Ariel Carrera carreraariel at gmail.com
Mon Jan 8 15:18:29 EST 2018


"when your somebody get's a keycloak's distribution to be installed"  read
like: "when someone gets Keycloak to be installed" xD

2018-01-08 16:56 GMT-03:00 Ariel Carrera <carreraariel at gmail.com>:

> Hi Stian, I checked differences in keycloak.min.js comparing version 3.4.1
> to 3.4.2.
> I can't see a problem at first sight... but It's still a problem to see
> your antivirus alerting for a threat when your browser access to a page
> that uses "keycloak.min.js" or when your somebody get's a keycloak's
> distribution to be installed.
>
> Maybe this issue must to be in Jira.
>
> Last changes in javascript file can be the problem.
>
> Maybe function "processInit()" needs some changes.
>
> Regards,
>
> 2018-01-08 16:26 GMT-03:00 Ariel Carrera <carreraariel at gmail.com>:
>
>> Checked with other computer (windows 10 + windows defender).
>>
>> keycloak-min.js is detected as virus from  version 3.4.2 to 3.4.3
>>
>>
>> 2018-01-03 17:44 GMT-03:00 Ramunas <ramunask at gmail.com>:
>>
>>> * just downloaded keycloak-js-adapter-dist-3.4.2.Final.zip file
>>> * extracted and scanned "keycloak-js-adapter-dist-3.4.2.Final" folder
>>> with Windows Defender on Windows 10 - no issues found
>>> * checked for Windows updates. New update "Definition Update for Windows
>>> Defender Antivirus - KB2267602 (Definition 1.259.1141.0)" was found and
>>> installed.
>>> * scanned again. No issues found.
>>>
>>> Ramūnas
>>>
>>
>>
>>
>> --
>> Ariel Carrera
>>
>
>
>
> --
> Ariel Carrera
>



-- 
Ariel Carrera


More information about the keycloak-dev mailing list