{"action":"created","issue":{"url":"https://api.github.com/repos/hadley/devtools/issues/1144","repository_url":"https://api.github.com/repos/hadley/devtools","labels_url":"https://api.github.com/repos/hadley/devtools/issues/1144/labels{/name}","comments_url":"https://api.github.com/repos/hadley/devtools/issues/1144/comments","events_url":"https://api.github.com/repos/hadley/devtools/issues/1144/events","html_url":"https://github.com/hadley/devtools/issues/1144","id":147205810,"number":1144,"title":"Trojan detected","user":{"login":"Amateur2","id":18376004,"avatar_url":"https://avatars.githubusercontent.com/u/18376004?v=3","gravatar_id":"","url":"https://api.github.com/users/Amateur2","html_url":"https://github.com/Amateur2","followers_url":"https://api.github.com/users/Amateur2/followers","following_url":"https://api.github.com/users/Amateur2/following{/other_user}","gists_url":"https://api.github.com/users/Amateur2/gists{/gist_id}","starred_url":"https://api.github.com/users/Amateur2/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Amateur2/subscriptions","organizations_url":"https://api.github.com/users/Amateur2/orgs","repos_url":"https://api.github.com/users/Amateur2/repos","events_url":"https://api.github.com/users/Amateur2/events{/privacy}","received_events_url":"https://api.github.com/users/Amateur2/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-04-10T08:30:44Z","updated_at":"2016-04-11T07:59:43Z","closed_at":null,"body":"When installing devtools (using RStudio) on a mac running the El Capitan OS,\r\nmy (Intego) Virus Barrier detected a Trojan: OSX/Flashback.G in openssl.so\r\nI don't know whether the problem is with the package itself, or the server, or something else.\r\nBut I thought I should let you know.\r\nIf the problem is not with the package, but something else, perhaps you would be kind enough to re-direct this report to the right person(s)? Many thanks"},"comment":{"url":"https://api.github.com/repos/hadley/devtools/issues/comments/208213891","html_url":"https://github.com/hadley/devtools/issues/1144#issuecomment-208213891","issue_url":"https://api.github.com/repos/hadley/devtools/issues/1144","id":208213891,"user":{"login":"Amateur2","id":18376004,"avatar_url":"https://avatars.githubusercontent.com/u/18376004?v=3","gravatar_id":"","url":"https://api.github.com/users/Amateur2","html_url":"https://github.com/Amateur2","followers_url":"https://api.github.com/users/Amateur2/followers","following_url":"https://api.github.com/users/Amateur2/following{/other_user}","gists_url":"https://api.github.com/users/Amateur2/gists{/gist_id}","starred_url":"https://api.github.com/users/Amateur2/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Amateur2/subscriptions","organizations_url":"https://api.github.com/users/Amateur2/orgs","repos_url":"https://api.github.com/users/Amateur2/repos","events_url":"https://api.github.com/users/Amateur2/events{/privacy}","received_events_url":"https://api.github.com/users/Amateur2/received_events","type":"User","site_admin":false},"created_at":"2016-04-11T07:59:42Z","updated_at":"2016-04-11T07:59:42Z","body":"Thank you for responding so promptly.\nI use Intego VirusBarrier8 (with up-to-date virus definitions) which I\nunderstand to be reliable for use on macs (which is what I'm using), but\nI'm by no means an expert.\nWhen I ran a full scan subsequently, it picked up the same file\n(openssl.so), and 'repaired' it when I selected that option.\n\nI sent it to you because the error message popped up immediately after I\ntyped:\n\ninstall.packages (\"devtools\")\n\ninto the RStudio screen.\n\nIt was the first instruction I'd typed, so I thought you were the obvious\npeople to send a message to, but  if I understand you correctly, it might\nbe another package used in the process rather than devtools itself - in\nwhich case, my apologies.\n\nAs will be evident, I'm a novice so reluctant to tempt fate by opening\n'openssl' again. However if you are unable to reproduce the problem, it\nsounds as if it's ok for others to use, which was my motive in contacting\nyou.\n\nMany thanks for your time, and for getting back to me so quickly.\n\nOn 10 April 2016 at 23:58, Jeroen Ooms <notifications@github.com> wrote:\n\n> I'm 99% confident this is a false positive (lots of trojans use openssl\n> code). The openssl.so file is part of the openssl package, so this is\n> definitely the wrong repo. Do you get the same error when installing\n> openssl?\n>\n> install.packages(\"openssl\")\n>\n> And what happens when you try installing openssl from source?\n>\n> install.packages(\"openssl\", type = \"source\")\n>\n> —\n> You are receiving this because you authored the thread.\n> Reply to this email directly or view it on GitHub\n> <https://github.com/hadley/devtools/issues/1144#issuecomment-208087720>\n>\n"}}