Skip to content

When I use OpenCode, Windows Defender pops up a security threat #16305

New issue
New issue
Closed as duplicate
Closed as duplicate
When I use OpenCode, Windows Defender pops up a security threat#16305
Assignees
Hona
Labels
bugSomething isn't workingcoreAnything pertaining to core functionality of the application (opencode server stuff)windows

Description

@joesdu
joesdu
opened on Mar 6, 2026

Description

When I use OpenCode, Windows Defender pops up a security threat and cannot work properly, and it keeps showing a prompt window asking me to restart the operating system. I saw that there are a large number of .dll files with similar names in the %TEMP% directory.

Image

Plugins

oh-my-opencode

OpenCode version

1.2.20

Steps to reproduce

just run opencode or opencode -v

Screenshot and/or share link

No response

Operating System

Windows11

Terminal

Windows Terminal

Activity

  1. joesdu
    added
    bugSomething isn't working
    on Mar 6, 2026
  2. github-actions
    assigned
    Hona
    on Mar 6, 2026
  3. github-actions
    added
    coreAnything pertaining to core functionality of the application (opencode server stuff)
    windows
    on Mar 6, 2026

  4. github-actions commented on Mar 6, 2026

    @github-actions
    github-actionsBot
    on Mar 6, 2026 – with GitHub Actions
    Contributor

    This issue might be a duplicate of existing issues. Please check:

    This appears to be a known recurring issue with Windows Defender flagging OpenCode as a false positive. Please review the above issues for context and existing discussion before this is investigated further.

  5. joesdu
    closed this as a duplicateof Trojan: Script/Wacatac.H!m! #16314 on Mar 10, 2026

  6. Hona commented on Mar 10, 2026

    @Hona
    Hona
    on Mar 10, 2026
    Member

    dlls are just Bun extracting... we're getting code signing soon

  7. Hona commented on Mar 29, 2026

    @Hona
    Hona
    on Mar 29, 2026
    Member

    As of OpenCode v1.3.4 across the CLI + Desktop apps, we have full code signing - so there should be no more warnings.

    Please let me know otherwise

    Image
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingcoreAnything pertaining to core functionality of the application (opencode server stuff)windows

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions