Skip to content

Windows Defender says Found Trojan #7821

New issue
New issue
Closed
Closed
Windows Defender says Found Trojan#7821
Assignees
adamdotdevin
Labels
bugSomething isn't workingwebRelates to opencode on web / desktopwindows

Description

@PRIMExALBIN
PRIMExALBIN
opened on Jan 11, 2026

Description

This is the second time. I accidently removed the thinking it was a trojan and I had to reinstall the entire thing now it says that again

Plugins

Oh My Opencode

OpenCode version

Desktop app

Steps to reproduce

No response

Screenshot and/or share link

Image

Operating System

Windows 11

Terminal

desktop app

Activity

  1. PRIMExALBIN
    added
    bugSomething isn't working
    on Jan 11, 2026
  2. github-actions
    assigned
    adamdotdevin
    on Jan 11, 2026
  3. github-actions
    added
    webRelates to opencode on web / desktop
    windows
    on Jan 11, 2026

  4. github-actions commented on Jan 11, 2026

    @github-actions
    github-actionsBot
    on Jan 11, 2026 – with GitHub Actions
    Contributor

    This issue might be a duplicate of existing issues. Please check:

    Feel free to ignore if none of these address your specific case.

  5. PRIMExALBIN commented on Jan 11, 2026

    @PRIMExALBIN
    PRIMExALBIN
    on Jan 11, 2026
    Author

    Image Virus total says its a trojan

  6. magicprinc commented on Jan 11, 2026

    @magicprinc
    magicprinc
    on Jan 11, 2026

    +1 on Windows 10

  8. alanmcilwaine commented on Jan 11, 2026

    @alanmcilwaine
    alanmcilwaine
    on Jan 11, 2026

    +1 on Windows 11. Multiple people on our team can reproduce it by installing v1.1.13 via npm and running opencode.

  9. Akinue commented on Jan 11, 2026

    @Akinue
    Akinue
    on Jan 11, 2026

    +1 on Windows 11. Tried install via Chocolatey v1.1.13

    opencode 1.1.13 Downloading opencode 64 bit from 'https://github.com/anomalyco/opencode/releases/download/v1.1.13/opencode-windows-x64.zip' Progress: 100% - Completed download of C:\Users\user\AppData\Local\Temp\chocolatey\opencode\1.1.13\opencode-windows-x64.zip (49.47 MB). Download of opencode-windows-x64.zip (49.47 MB) completed. Hashes match. Extracting C:\Users\user\AppData\Local\Temp\chocolatey\opencode\1.1.13\opencode-windows-x64.zip to C:\ProgramData\chocolatey\lib\opencode\tools... C:\ProgramData\chocolatey\lib\opencode\tools Added C:\ProgramData\chocolatey\bin\opencode.exe shim pointed to '..\lib\opencode\tools\opencode.exe'.

    For completeness sake I was on 1.1.7 and uninstalled to re-install the update. Just tested 1.1.12, 1.1.11, 1.1.10 same behavior.

    1.1.7, 1.1.8 work fine from chocolately (1.1.9 doesn't exist).

    Image

  10. ricred commented on Jan 11, 2026

    @ricred
    ricred
    on Jan 11, 2026

    +1 on Windows 11. Tried install via Chocolatey v1.1.11

  11. okazakov commented on Jan 11, 2026

    @okazakov
    okazakov
    on Jan 11, 2026

    Another issue raised for this here: #7669

  12. uoyoCsharp commented on Jan 12, 2026

    @uoyoCsharp
    uoyoCsharp
    on Jan 12, 2026

    +1 on Windows 11. downloaded the installation package from the official website on 2026/01/12.

  13. BumpyClock commented on Jan 12, 2026

    @BumpyClock
    BumpyClock
    on Jan 12, 2026

    +1

  14. Mirrowel commented on Jan 12, 2026

    @Mirrowel
    Mirrowel
    on Jan 12, 2026

    Image Virus total says its a trojan

    Actually, this says it is clean. You have barely any detections. And any detections it gets are from noname AVs or known problematic ones like google or windows

  15. jackheuberger commented on Jan 12, 2026

    @jackheuberger
    jackheuberger
    on Jan 12, 2026

    +1 installed from bun

  16. rekram1-node commented on Jan 12, 2026

    @rekram1-node
    rekram1-node
    on Jan 12, 2026
    Collaborator

    Going to do some code signing stuff to prevent these false positives

  17. 4cecoder commented on Jan 12, 2026

    @4cecoder
    4cecoder
    on Jan 12, 2026

    cloning the project trying to run from source and windows seems to remove this

    opentui package may be the issue on windows getting flagged?

    it seems the opentui might be:

    sus

    Image

  18. Vagenda commented on Jan 14, 2026

    @Vagenda
    Vagenda
    on Jan 14, 2026

    Image Virus total says its a trojan

    Actually, this says it is clean. You have barely any detections. And any detections it gets are from noname AVs or known problematic ones like google or windows

    Clean means no detections. Your powers of observation are flawed, as are your dismissals.

  19. odiseo0 commented on Feb 4, 2026

    @odiseo0
    odiseo0
    on Feb 4, 2026

    +1 on 1.1.51

  20. ShanQincheng commented on Feb 5, 2026

    @ShanQincheng
    ShanQincheng
    on Feb 5, 2026

    +1 on 1.1.51

  21. Hona commented on Mar 29, 2026

    @Hona
    Hona
    on Mar 29, 2026
    Member

    As of OpenCode v1.3.4 across the CLI + Desktop apps, we have full code signing - so there should be no more warnings.

    Please let me know otherwise

    Image
  22. Hona
    closed this as completedon Mar 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingwebRelates to opencode on web / desktopwindows

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions