bit-0.1.7-win-x64.tar.gz contain Trojan:Win32/Phonzy.C!ml

[PaulThiberville]

When i run bvm install i get a quarantine message from microsoft defender saying bit-0.1.7-win-x64.tar.gz contains trojan

[GiladShoham]

This was fixed a long time ago as part of the regular security/vulnerability fixes to how Bit is packaged and released.

The reported version (0.1.7) is very old; I checked the current stable release (2.0.26) and the Windows build no longer ships a packed single-file executable (the old pkg-bundled binary was the likely trigger for Defender's Phonzy.C!ml ML-heuristic false positive). Today's package is plain JS run via a separately installed official Node.js runtime, plus legitimate native .node addons and one verified, byte-for-byte identical upstream esbuild.exe.

Closing.