[keycloak-dev] Trojan in Keycloak Javascript Adapter?

Stian Thorgersen sthorger at redhat.com
Tue Jan 9 07:42:53 EST 2018


Please create an issue with the details. We'll need to figure out how to
reproduce the issue though. Seemed like Ramunas had tried, but that
Defender wasn't reporting anything for him.

On 8 January 2018 at 21:18, Ariel Carrera <carreraariel at gmail.com> wrote:

> "when your somebody get's a keycloak's distribution to be installed"  read
> like: "when someone gets Keycloak to be installed" xD
>
> 2018-01-08 16:56 GMT-03:00 Ariel Carrera <carreraariel at gmail.com>:
>
>> Hi Stian, I checked differences in keycloak.min.js comparing version
>> 3.4.1 to 3.4.2.
>> I can't see a problem at first sight... but It's still a problem to see
>> your antivirus alerting for a threat when your browser access to a page
>> that uses "keycloak.min.js" or when your somebody get's a keycloak's
>> distribution to be installed.
>>
>> Maybe this issue must to be in Jira.
>>
>> Last changes in javascript file can be the problem.
>>
>> Maybe function "processInit()" needs some changes.
>>
>> Regards,
>>
>> 2018-01-08 16:26 GMT-03:00 Ariel Carrera <carreraariel at gmail.com>:
>>
>>> Checked with other computer (windows 10 + windows defender).
>>>
>>> keycloak-min.js is detected as virus from  version 3.4.2 to 3.4.3
>>>
>>>
>>> 2018-01-03 17:44 GMT-03:00 Ramunas <ramunask at gmail.com>:
>>>
>>>> * just downloaded keycloak-js-adapter-dist-3.4.2.Final.zip file
>>>> * extracted and scanned "keycloak-js-adapter-dist-3.4.2.Final" folder
>>>> with Windows Defender on Windows 10 - no issues found
>>>> * checked for Windows updates. New update "Definition Update for
>>>> Windows Defender Antivirus - KB2267602 (Definition 1.259.1141.0)" was found
>>>> and installed.
>>>> * scanned again. No issues found.
>>>>
>>>> Ramūnas
>>>>
>>>
>>>
>>>
>>> --
>>> Ariel Carrera
>>>
>>
>>
>>
>> --
>> Ariel Carrera
>>
>
>
>
> --
> Ariel Carrera
>


More information about the keycloak-dev mailing list