My site was exploited,
maldet scan shows following

FILE HIT LIST:
{HEX}php.exe.globals.416 : /modules/contrib/fontawesome/drush/fontawesome.drush.inc
===============================================
Linux Malware Detect v1.6.2 < proj@rfxn.com >

Maybe it is false alert, but needs to be checked if it is really is

This was already reported for 7.x version
https://www.drupal.org/project/fontawesome/issues/2944352

CommentFileSizeAuthor
#3 drush_file_causes_malware_alert-2959434-3.patch3.91 KBdaniel.moberly

Comments

ag_design created an issue. See original summary.

ag_design’s picture

ag_design commented

As somebody suggested:
Move the file to another location then zip the fontawesome directory and upload to modules directory of your website.

But this is not an option , because doing this is against any Drupal guidelines using composer/drush when updating/installing modules.

daniel.moberly’s picture

daniel.moberly commented
Title: Malware report » Drush file causes malware alert
Version: 8.x-2.0 » 8.x-1.x-dev
Status: Active » Needs review
StatusFileSize
new drush_file_causes_malware_alert-2959434-3.patch3.91 KB

The drush file has been removed from version 2 already as it has been replaced by the new drush command structure. Removing it from version 1, which should solve this issue. The file is currently not functional in 1.x so there's no reason to keep it.

  • Daniel.Moberly committed 85cf0de on 8.x-1.x 
    Issue #2959434 by Daniel.Moberly: Drush file causes malware alert
daniel.moberly’s picture

daniel.moberly commented
Status: Needs review » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.