[keycloak-user] [keycloak-dev] Trojan in Keycloak Javascript Adapter?

[Bruno Oliveira]

So I don't have Windows 10, but I managed to run a VM from
https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/.

After that I cloned the whole Keycloak repository
https://github.com/keycloak/keycloak-js-bower. Nothing was found, please
see the screenshot: https://i.imgur.com/1NbFGrn.png.

On Tue, Jan 9, 2018 at 10:46 AM Stian Thorgersen <sthorger at redhat.com>
wrote:

> Please create an issue with the details. We'll need to figure out how to
> reproduce the issue though. Seemed like Ramunas had tried, but that
> Defender wasn't reporting anything for him.
>
> On 8 January 2018 at 21:18, Ariel Carrera <carreraariel at gmail.com> wrote:
>
> > "when your somebody get's a keycloak's distribution to be installed"
> read
> > like: "when someone gets Keycloak to be installed" xD
> >
> > 2018-01-08 16:56 GMT-03:00 Ariel Carrera <carreraariel at gmail.com>:
> >
> >> Hi Stian, I checked differences in keycloak.min.js comparing version
> >> 3.4.1 to 3.4.2.
> >> I can't see a problem at first sight... but It's still a problem to see
> >> your antivirus alerting for a threat when your browser access to a page
> >> that uses "keycloak.min.js" or when your somebody get's a keycloak's
> >> distribution to be installed.
> >>
> >> Maybe this issue must to be in Jira.
> >>
> >> Last changes in javascript file can be the problem.
> >>
> >> Maybe function "processInit()" needs some changes.
> >>
> >> Regards,
> >>
> >> 2018-01-08 16:26 GMT-03:00 Ariel Carrera <carreraariel at gmail.com>:
> >>
> >>> Checked with other computer (windows 10 + windows defender).
> >>>
> >>> keycloak-min.js is detected as virus from  version 3.4.2 to 3.4.3
> >>>
> >>>
> >>> 2018-01-03 17:44 GMT-03:00 Ramunas <ramunask at gmail.com>:
> >>>
> >>>> * just downloaded keycloak-js-adapter-dist-3.4.2.Final.zip file
> >>>> * extracted and scanned "keycloak-js-adapter-dist-3.4.2.Final" folder
> >>>> with Windows Defender on Windows 10 - no issues found
> >>>> * checked for Windows updates. New update "Definition Update for
> >>>> Windows Defender Antivirus - KB2267602 (Definition 1.259.1141.0)" was
> found
> >>>> and installed.
> >>>> * scanned again. No issues found.
> >>>>
> >>>> Ramūnas
> >>>>
> >>>
> >>>
> >>>
> >>> --
> >>> Ariel Carrera
> >>>
> >>
> >>
> >>
> >> --
> >> Ariel Carrera
> >>
> >
> >
> >
> > --
> > Ariel Carrera
> >
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user