Re: fink website infected?

The alert is what I sent you.
It appeared today: I have had Avast for years.
I also have Avast on my phone, but Avast does not give any alert for www.finkproject.org<http://finkproject.org>

I do not know what to say

Giuliano




On 21. Mar 2024, at 14:36, [email protected] wrote:

On 2024-03-21 08:07, Franchetti, Giuliano Dr. wrote:
Hello,
I have a Web threat secured alert from Avast Web Shield alert
This is what it says:
Whew! We’ve just saved you from an infected website
Infected URL: https://www.finkproject.org/
Threat: HTML:Script-inf [Susp]
This URL contains malicious code that could harm your computer.
If
you’re willing to risk it, you can turn off your Avast Web Shield to
continue.
But we strongly recommend walking away from this one.
Could you check??
Giuliano

Does the alert give any more details (eg what script specifically)?

Looking at the code on the main page, we load one script from net-filter.com, but that's been there since 2012
https://github.com/fink/website/blame/280d3486946b9cc1dc4e5f69440ac2fd00db68af/index.en.php#L225-L227

There's also a script being loaded from google-analytics.com that was was last touched 9 years ago
https://github.com/fink/website/blame/280d3486946b9cc1dc4e5f69440ac2fd00db68af/analytics.inc#L25-L38

To be fair, probably should nix those anyway since (1) not sure what net-filter was set up to do, and (2) no one is checking google-analytics.

Hanspeter

_______________________________________________
Fink-users mailing list
[email protected]
List archive:
https://sourceforge.net/p/fink/mailman/fink-users/
Subscription management:
https://lists.sourceforge.net/lists/listinfo/fink-users