https://community.cisco.com/t5/endpoint-security/streetsidesoftware-code-spell-checker-2-0-4-marked-as-malicious/m-p/4460104#M6372 <P><STRONG>Detection</STRONG>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <STRONG>W32.7C9F454E6E-95.SBX.TG</STRONG></P><P><STRONG>Fingerprint (SHA-256)<SPAN> 7c9f454e6e3efb67fef761dc40446e854056c9bcd753c505bda539f531e2147e</SPAN></STRONG></P><P><STRONG>File Name</STRONG>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; streetsidesoftware.code-spell-checker-2.0.4</P><P><STRONG>File Size</STRONG>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;2 MB</P><P><STRONG>Parent Filename</STRONG>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Code Helper (Renderer)</P><P><STRONG>Severity</STRONG>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Medium</P><P>&nbsp;</P><P>&nbsp;</P><P>File was recently updated in GitHub and this is related to the same software from mid last week. I have submitted to Talos Intelligence. Looking at GitHub, a new version (2.0.4 was pushed out&nbsp; Sept. 4th - <A href="https://github.com/streetsidesoftware/vscode-spell-checker/releases/tag/v2.0.4" target="_blank">https://github.com/streetsidesoftware/vscode-spell-checker/releases/tag/v2.0.4</A>)</P><P>&nbsp;</P><P><A href="https://community.cisco.com/t5/endpoint-security/streetsidesoftware-code-spell-checker-2-0-2-marked-as-malicious/td-p/4458535" target="_blank">https://community.cisco.com/t5/endpoint-security/streetsidesoftware-code-spell-checker-2-0-2-marked-as-malicious/td-p/4458535</A></P> Mon, 06 Sep 2021 00:17:16 GMT jbates5873 2021-09-06T00:17:16Z https://community.cisco.com/t5/endpoint-security/streetsidesoftware-code-spell-checker-2-0-4-marked-as-malicious/m-p/4460104#M6372 <P><STRONG>Detection</STRONG>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <STRONG>W32.7C9F454E6E-95.SBX.TG</STRONG></P><P><STRONG>Fingerprint (SHA-256)<SPAN> 7c9f454e6e3efb67fef761dc40446e854056c9bcd753c505bda539f531e2147e</SPAN></STRONG></P><P><STRONG>File Name</STRONG>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; streetsidesoftware.code-spell-checker-2.0.4</P><P><STRONG>File Size</STRONG>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;2 MB</P><P><STRONG>Parent Filename</STRONG>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Code Helper (Renderer)</P><P><STRONG>Severity</STRONG>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Medium</P><P>&nbsp;</P><P>&nbsp;</P><P>File was recently updated in GitHub and this is related to the same software from mid last week. I have submitted to Talos Intelligence. Looking at GitHub, a new version (2.0.4 was pushed out&nbsp; Sept. 4th - <A href="https://github.com/streetsidesoftware/vscode-spell-checker/releases/tag/v2.0.4" target="_blank">https://github.com/streetsidesoftware/vscode-spell-checker/releases/tag/v2.0.4</A>)</P><P>&nbsp;</P><P><A href="https://community.cisco.com/t5/endpoint-security/streetsidesoftware-code-spell-checker-2-0-2-marked-as-malicious/td-p/4458535" target="_blank">https://community.cisco.com/t5/endpoint-security/streetsidesoftware-code-spell-checker-2-0-2-marked-as-malicious/td-p/4458535</A></P> Mon, 06 Sep 2021 00:17:16 GMT https://community.cisco.com/t5/endpoint-security/streetsidesoftware-code-spell-checker-2-0-4-marked-as-malicious/m-p/4460104#M6372 jbates5873 2021-09-06T00:17:16Z https://community.cisco.com/t5/endpoint-security/streetsidesoftware-code-spell-checker-2-0-4-marked-as-malicious/m-p/4464722#M6383 <P>Hello</P> <P>starting from second half of 6th of September file is not detected anymore by Secure Endpoints Cloud. In case of any other False Positives, feel free to open dispute with Talos under:&nbsp;<A href="https://talosintelligence.com/tickets" target="_self">https://talosintelligence.com/tickets</A></P> <P>-Wojciech</P> Mon, 13 Sep 2021 07:33:54 GMT https://community.cisco.com/t5/endpoint-security/streetsidesoftware-code-spell-checker-2-0-4-marked-as-malicious/m-p/4464722#M6383 Wojciech Cecot 2021-09-13T07:33:54Z