Re: fink website infected?

On 2024-03-21 08:07, Franchetti, Giuliano Dr. wrote:
> Hello,
> 
> I have a Web threat secured alert from Avast Web Shield alert
> This is what it says:
> 
> Whew! We’ve just saved you from an infected website
> Infected URL: https://www.finkproject.org/
> Threat: HTML:Script-inf [Susp]
> This URL contains malicious code that could harm your computer.
If
> you’re willing to risk it, you can turn off your Avast Web Shield to
> continue.
But we strongly recommend walking away from this one.
> 
> Could you check??
> 
> 
> 	Giuliano

Does the alert give any more details (eg what script specifically)?

Looking at the code on the main page, we load one script from 
net-filter.com, but that's been there since 2012
https://github.com/fink/website/blame/280d3486946b9cc1dc4e5f69440ac2fd00db68af/index.en.php#L225-L227

There's also a script being loaded from google-analytics.com that was 
was last touched 9 years ago
https://github.com/fink/website/blame/280d3486946b9cc1dc4e5f69440ac2fd00db68af/analytics.inc#L25-L38

To be fair, probably should nix those anyway since (1) not sure what 
net-filter was set up to do, and (2) no one is checking 
google-analytics.

Hanspeter



_______________________________________________
Fink-users mailing list
[email protected]
List archive:
https://sourceforge.net/p/fink/mailman/fink-users/
Subscription management:
https://lists.sourceforge.net/lists/listinfo/fink-users