Trojan detected

Operating system

Linux

Joplin version

3.7.21

Sync target

OneDrive

What issue do you have?

I download the last appimage 3.7.21.
despite the fact I'm on linux, Microsoft antivir (via Virustotal) found the Trojan:Script/Wacatac.B!ml.
Maybe it's a fake detection ?

to go further, where find pgp signature of the file appimage?

regards

Hi, it is almost certainly a false positive.

Personally I wouldn't worry about Microsoft flagging a Linux app as a virus. None of the other virus scanners found anything at all.

There isn't a GPG signature file but the releases section on GitHub for v3.7.21 does include SHA256 and SHA512 hashes of the AppImage.

image

Here are the results from my search on ChatGPT Plus. It explains exactly how to verify the file that you downloaded is exactly the same as the published file and it is an explanation to be used on Linux.