Security Alert: Potential Trojan Detected in Windows Release v0.54.1 about fzf

[junegunn]

I'm pretty confident that this is a false positive. This has alrealy happened several times in the past.

https://github.com/search?q=repo%3Ajunegunn%2Ffzf+trojan&type=issues

Also see golang/go@1be58dc

[nifr]

I get the same security notification from Windows Defender during winget install 'junegunn.fzf' on Windows 11.

The file is detected as a trojan script and automatically quarantined by Windows Defender during install/upgrade with winget.

This fails the installation process with error:

Failed to extract the contents of the archive

Full Output:

(1/1) Found fzf [junegunn.fzf] Version 0.54.1
This application is licensed to you by its owner.
Microsoft is not responsible for, nor does it grant any licenses to, third-party packages.
Downloading https://github.com/junegunn/fzf/releases/download/v0.54.1/fzf-0.54.1-windows_amd64.zip
  ██████████████████████████████  1.68 MB / 1.68 MB
Successfully verified installer hash
Extracting archive...
Failed to extract the contents of the archive

[nifr]

As a quick workaround you can install the previous 5.40.0 release with:

winget install 'junegunn.fzf' --version '0.54.0'

In order to prevent winget upgrade from failing with above mentioned error you can pin the 5.40.0 version with:

winget pin add 'junegunn.fzf' --version '0.54.0' --force

You can release the version pinning after this issue is resolved with:

winget pin remove --id 'junegunn.fzf'

[LexSong]

Thank you for your response. I will keep this issue open until the next release or Windows Defender resolves the false positive.

[LexSong]

Close this issue as Windows Defender no longer reports any threats.