Hacker News Reader

On another note, Sourceforge just removes the malware flag, but did they actually check anything or just went with the provided explanation without any concrete details? If I hijacked some software and got caught, I'd act nonchalantly like this as well and hope it'll blow over without anyone noticing.

View on HN

As far as I know, they didn't check anything. (And neither have I -- no comment on whether this is an AV true positive or false positive.)

Here's VirusTotal on the tarball (note Chrome blocks its download, for the same reason): https://www.virustotal.com/gui/file/c08e2ba0049307017bf9d8a6...

Nimda was a Windows malware from 2001. It seems unlikely that would be a meaningful attack vector for a compromised privoxy in 2025. But again, I have not investigated it.

Reply on news.ycombinator.com