Devolutions / Devolutions/UniGetUI

[BUG] Trojan detected in latest v2026.2.7

Open
#5,231 1 comment 0 reactions 0 assignees View on GitHub
bug
Dominant language
C#
Stars
26.1k
Forks
924
Avg merge
15h 52m
Merged PRs (30d)
52

Description

### Please confirm these before moving forward

- [x] I have searched for my issue and have not found a work-in-progress/duplicate/resolved issue.
- [x] I have tested that this issue has not been fixed in the latest [(beta or stable) release](https://github.com/Devolutions/UniGetUI/releases/).
- [x] I have checked the [FAQ](https://github.com/Devolutions/UniGetUI#frequently-asked-questions) section for solutions.
- [x] This issue is about a bug (if it is not, please use the [correct template](https://github.com/Devolutions/UniGetUI/issues/new/choose)).

### UniGetUI Version

2026.2.7

### Windows version, edition, and architecture

Windows 11 Pro 25H2

### Describe your issue

When I download the latest version's zip file, Windows Security immediately quarantines it, saying it has a trojan.

### Steps to reproduce the issue

- Windows 11 machine with no update pending
- Windows Security running with all default options
- Download the zip of the latest release [UniGetUI v2026.2.7](https://github.com/Devolutions/UniGetUI/releases/tag/v2026.2.7)

Windows Security immediately quarantines it, saying it has a trojan.

### UniGetUI Log

```text
N/A
```

### Package Managers Logs

```text
N/A
```

### Relevant information

Hope you understand that just saying "it's false positive" or "you can read the code in the repo" isn't enough. Hopefully this can be addressed in more details and next release does not have this problem.

### Screenshots and videos

Image

Contributor guide

Open the contributing guide

Research direction

Start with the UniGetUI v2026.2.7 ZIP release and the attached Windows Security quarantine report; no source file or test is identified. Reproduce the report on Windows 11 Pro 25H2 with Windows Security's default options and inspect the release artifact. Done means the detection cause is addressed and a subsequent release no longer triggers the reported quarantine.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
desktop, release, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.