AVG reports 4-fold infection when installing jupyterthemes

[lvwarren]

Checklist

• I added a descriptive title
• I searched for other issues and couldn't find a solution or duplication
• I already searched in Google and didn't find any good information or help
• I looked at the docs and didn't see anything to help

What happened?

Executing installation:
conda install -c conda-forge jupyterthemes
caused AVG antivirus to announce 4 attempted viral intrusions.
See 4 attachments for details on each one.

Model Name: MacBook Pro
Chip: Apple M1 Max
OS: Macos Monterey Version 12.1
Total Number of Cores: 10 (8 performance and 2 efficiency)
Memory: 32 GB
System Firmware Version: 7429.61.2

Conda info

conda info

active environment : base
    active env location : /opt/miniforge3
            shell level : 1
       user config file : /Users/van/.condarc
 populated config files : /opt/miniforge3/.condarc
                          /Users/van/.condarc
          conda version : 4.11.0
    conda-build version : not installed
         python version : 3.9.7.final.0
       virtual packages : __osx=12.1=0
                          __unix=0=0
                          __archspec=1=arm64
       base environment : /opt/miniforge3  (writable)
      conda av data dir : /opt/miniforge3/etc/conda
  conda av metadata url : None
           channel URLs : https://conda.anaconda.org/conda-forge/osx-arm64
                          https://conda.anaconda.org/conda-forge/noarch
          package cache : /opt/miniforge3/pkgs
                          /Users/van/.conda/pkgs
       envs directories : /opt/miniforge3/envs
                          /Users/van/.conda/envs
               platform : osx-arm64
             user-agent : conda/4.11.0 requests/2.27.1 CPython/3.9.7 Darwin/21.2.0 OSX/12.1
                UID:GID : 501:20
             netrc file : None
           offline mode : False

Conda config

conda info

==> /opt/miniforge3/.condarc <==
channels:
  - conda-forge

==> /Users/van/.condarc <==
auto_activate_base: True

Conda list

conda info

# packages in environment at /opt/miniforge3:
#
# Name                    Version                   Build  Channel
appdirs                   1.4.4                      py_0    anaconda
appnope                   0.1.2            py39h2804cbe_2    conda-forge
argon2-cffi               21.3.0             pyhd8ed1ab_0    conda-forge
argon2-cffi-bindings      21.2.0           py39h5161555_1    conda-forge
asttokens                 2.0.5              pyhd8ed1ab_0    conda-forge
async_generator           1.10                       py_0    anaconda
attrs                     20.2.0                     py_0    anaconda
backcall                  0.2.0                      py_0    anaconda
black                     19.10b0                    py_0    anaconda
bleach                    3.2.1                      py_0    anaconda
brotli                    1.0.9                h3422bc3_6    conda-forge
brotli-bin                1.0.9                h3422bc3_6    conda-forge
brotlipy                  0.7.0           py39h5161555_1003    conda-forge
ca-certificates           2021.10.8            h4653dfc_0    conda-forge
certifi                   2021.10.8        py39h2804cbe_1    conda-forge
cffi                      1.15.0           py39h52b1de0_0    conda-forge
charset-normalizer        2.0.11             pyhd8ed1ab_0    conda-forge
click                     7.1.2                      py_0    anaconda
colorama                  0.4.4              pyh9f0ad1d_0    conda-forge
conda                     4.11.0           py39h2804cbe_0    conda-forge
conda-package-handling    1.7.3            py39h5161555_1    conda-forge
cryptography              36.0.1           py39hfb8cd70_0    conda-forge
cycler                    0.11.0             pyhd8ed1ab_0    conda-forge
decorator                 4.4.2                      py_0    anaconda
defusedxml                0.6.0                      py_0    anaconda
entrypoints               0.4                pyhd8ed1ab_0    conda-forge
executing                 0.8.2              pyhd8ed1ab_0    conda-forge
flit-core                 3.6.0              pyhd8ed1ab_0    conda-forge
fonttools                 4.29.1           py39h5161555_0    conda-forge
freetype                  2.10.4               h17b34a0_1    conda-forge
fribidi                   1.0.10               h27ca646_0    conda-forge
giflib                    5.2.1                h27ca646_2    conda-forge
idna                      3.3                pyhd8ed1ab_0    conda-forge
importlib-metadata        2.0.0                      py_1    anaconda
importlib_metadata        2.0.0                         1    anaconda
ipykernel                 5.5.5            py39h32adebf_0    conda-forge
ipython                   8.0.1            py39h2804cbe_0    conda-forge
ipython_genutils          0.2.0                      py_1    conda-forge
ipywidgets                7.5.1                      py_1    anaconda
jbig                      2.1               h3422bc3_2003    conda-forge
jedi                      0.18.1           py39h2804cbe_0    conda-forge
jinja2                    2.11.2                     py_0    anaconda
jpeg                      9e                   h3422bc3_0    conda-forge
jsonschema                3.2.0                      py_2    anaconda
jupyter                   1.0.0            py39h2804cbe_7    conda-forge
jupyter_client            6.1.7                      py_0    anaconda
jupyter_console           6.2.0                      py_0    anaconda
jupyter_core              4.9.1            py39h2804cbe_1    conda-forge
jupyterlab_pygments       0.1.2                      py_0    anaconda
jupyterthemes             0.20.0                     py_1    conda-forge
kiwisolver                1.3.2            py39h4d2d688_1    conda-forge
lcms2                     2.12                 had6a04f_0    conda-forge
lerc                      3.0                  hbdafb3b_0    conda-forge
lesscpy                   0.15.0             pyhd8ed1ab_0    conda-forge
libblas                   3.9.0           13_osxarm64_openblas    conda-forge
libbrotlicommon           1.0.9                h3422bc3_6    conda-forge
libbrotlidec              1.0.9                h3422bc3_6    conda-forge
libbrotlienc              1.0.9                h3422bc3_6    conda-forge
libcblas                  3.9.0           13_osxarm64_openblas    conda-forge
libcxx                    12.0.1               h168391b_1    conda-forge
libdeflate                1.8                  h3422bc3_0    conda-forge
libffi                    3.4.2                h3422bc3_5    conda-forge
libgfortran               5.0.0.dev0      11_0_1_hf114ba7_23    conda-forge
libgfortran5              11.0.1.dev0         hf114ba7_23    conda-forge
liblapack                 3.9.0           13_osxarm64_openblas    conda-forge
libopenblas               0.3.18          openmp_h5dd58f0_0    conda-forge
libpng                    1.6.37               hf7e6567_2    conda-forge
libsodium                 1.0.18               h27ca646_1    conda-forge
libtiff                   4.3.0                h74060c4_2    conda-forge
libwebp                   1.2.2                h0d20362_0    conda-forge
libwebp-base              1.2.2                h3422bc3_1    conda-forge
libxcb                    1.13              h9b22ae9_1004    conda-forge
libzlib                   1.2.11            hee7b306_1013    conda-forge
llvm-openmp               12.0.1               hf3c4609_1    conda-forge
lz4-c                     1.9.3                hbdafb3b_1    conda-forge
markupsafe                2.0.1            py39h5161555_1    conda-forge
matplotlib-base           3.5.1            py39h5aa4fe7_0    conda-forge
matplotlib-inline         0.1.3              pyhd8ed1ab_0    conda-forge
mistune                   0.8.4           py39h5161555_1005    conda-forge
munkres                   1.1.4              pyh9f0ad1d_0    conda-forge
mypy_extensions           0.4.3            py39h2804cbe_4    conda-forge
nbclient                  0.5.1                      py_0    anaconda
nbconvert                 6.4.1            py39h2804cbe_0    conda-forge
nbformat                  5.0.8                      py_0    anaconda
ncurses                   6.2                  h9aa5885_4    conda-forge
nest-asyncio              1.4.1                      py_0    anaconda
notebook                  6.4.8              pyha770c72_0    conda-forge
numpy                     1.22.2           py39h61a45d2_0    conda-forge
openjpeg                  2.4.0                h062765e_1    conda-forge
openssl                   1.1.1l               h3422bc3_0    conda-forge
packaging                 20.4                       py_0    anaconda
pandocfilters             1.5.0              pyhd8ed1ab_0    conda-forge
parso                     0.8.0                      py_0    anaconda
pathspec                  0.7.0                      py_0    anaconda
pexpect                   4.8.0              pyh9f0ad1d_2    conda-forge
pickleshare               0.7.5                   py_1003    conda-forge
pillow                    9.0.1            py39hcb29f89_0    conda-forge
pip                       21.3.1             pyhd8ed1ab_0    conda-forge
ply                       3.11                       py_1    conda-forge
prometheus_client         0.8.0                      py_0    anaconda
prompt-toolkit            3.0.8                      py_0    anaconda
prompt_toolkit            3.0.8                         0    anaconda
pthread-stubs             0.4               h27ca646_1001    conda-forge
ptyprocess                0.7.0              pyhd3deb0d_0    conda-forge
pure_eval                 0.2.2              pyhd8ed1ab_0    conda-forge
pycosat                   0.6.3           py39h5161555_1009    conda-forge
pycparser                 2.21               pyhd8ed1ab_0    conda-forge
pygments                  2.7.1                      py_0    anaconda
pyopenssl                 22.0.0             pyhd8ed1ab_0    conda-forge
pyparsing                 2.4.7                      py_0    anaconda
pyrsistent                0.18.1           py39h5161555_0    conda-forge
pysocks                   1.7.1            py39h2804cbe_4    conda-forge
python                    3.9.7           h54d631c_3_cpython    conda-forge
python-dateutil           2.8.1                      py_0    anaconda
python_abi                3.9                      2_cp39    conda-forge
pyzmq                     22.3.0           py39h02c6a76_1    conda-forge
readline                  8.1                  hedafd6a_0    conda-forge
regex                     2022.1.18        py39h5161555_0    conda-forge
requests                  2.27.1             pyhd8ed1ab_0    conda-forge
ruamel_yaml               0.15.80         py39h5161555_1006    conda-forge
send2trash                1.8.0              pyhd8ed1ab_0    conda-forge
setuptools                60.8.1           py39h2804cbe_0    conda-forge
six                       1.16.0             pyh6c4a22f_0    conda-forge
sqlite                    3.37.0               h72a2b83_0    conda-forge
stack_data                0.1.4              pyhd8ed1ab_0    conda-forge
terminado                 0.13.1           py39h2804cbe_0    conda-forge
testpath                  0.4.4                      py_0    anaconda
tk                        8.6.11               he1e0b03_1    conda-forge
toml                      0.10.1                     py_0    anaconda
tornado                   6.1              py39h5161555_2    conda-forge
tqdm                      4.62.3             pyhd8ed1ab_0    conda-forge
traitlets                 5.0.5                      py_0    anaconda
typed-ast                 1.5.2            py39h5161555_0    conda-forge
typing_extensions         3.7.4.3                    py_0    anaconda
tzdata                    2021e                he74cb21_0    conda-forge
unicodedata2              14.0.0           py39h5161555_0    conda-forge
urllib3                   1.26.8             pyhd8ed1ab_1    conda-forge
wcwidth                   0.2.5                      py_0    anaconda
webencodings              0.5.1                      py_1    conda-forge
wheel                     0.37.1             pyhd8ed1ab_0    conda-forge
widgetsnbextension        3.5.2            py39h2804cbe_1    conda-forge
xorg-libxau               1.0.9                h27ca646_0    conda-forge
xorg-libxdmcp             1.1.3                h27ca646_0    conda-forge
xz                        5.2.5                h642e427_1    conda-forge
yaml                      0.2.5                h3422bc3_2    conda-forge
zeromq                    4.3.4                hbdafb3b_1    conda-forge
zipp                      3.3.1                      py_0    anaconda
zlib                      1.2.11            hee7b306_1013    conda-forge
zstd                      1.5.2                h861e0a7_0    conda-forge

Additional Context

No response

[beeankha]

Hello @lvwarren , thank you for filing this issue!

It appears that this is a known problem that is related to pillow and the conda-forge feedstock, which includes the antivirus-triggering files. There is also additional discussion about these files and the problems associated with them here.

The Anaconda feedstock for pillow does not include the crash_* files; please post any further discussion related to this issue in the conda-forge/pillow-feedstock repo, since that is where this package is coming from.

[lvwarren]

Thank you so much Bianca for recognizing what was going on here! It causes us severe heartburn when these kinds of issues arise and your thorough analysis is quite helpful. Get Outlook for iOS<https://aka.ms/o0ukef>

…

________________________________ From: Bianca Henderson ***@***.***> Sent: Thursday, February 17, 2022 11:46:58 AM To: conda/conda ***@***.***> Cc: L Van Warren ***@***.***>; Mention ***@***.***> Subject: Re: [conda/conda] AVG reports 4-fold infection when installing jupyterthemes (Issue #11202) Closed #11202<#11202>. — Reply to this email directly, view it on GitHub<#11202 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AAEP4LTLZOMUBGPMB6D66NLU3UYBFANCNFSM5N4GORXA>. Triage notifications on the go with GitHub Mobile for iOS<https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android<https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you were mentioned.Message ID: ***@***.***>