Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Windows reports one of Cypress dependency (flatmap-stream) miner #5255

Closed
shahidcodes opened this issue Oct 1, 2019 · 1 comment
Closed
Labels
type: security 🔐 Security related

Comments

@shahidcodes
Copy link

Current behavior:

Installing cypress windows defender blocks this AppData\Local\Cypress\Cache\3.1.2\Cypress\resources\app\packages\server\node_modules\flatmap-stream\test\data.js file reporting it is a miner

Desired behavior:

It should be removed if it contains miner. I am attaching a screenshot and the detected file.

Steps to reproduce: (app code and test code)

Install cypress 3.1.2 using npm.

Versions

3.1.2

image
pastebin link to miner file

@jennifer-shehane
Copy link
Member

@shahidcodes flatmap-stream is not an included dependency in the cypress project as of 3.8.1.

 npm ls flatmap-stream
cypress@3.8.1 /Users/jennifer/Dev/cypress
└── (empty)

We are undergoing the process of notarization with Mac that will also give gaurantees that there is no malicious software in our product. #5791

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type: security 🔐 Security related
Projects
None yet
Development

No branches or pull requests

2 participants