Ahh that's unfortunate. This most likely is related to the rust `enigo` create, which we use to write text to the cursor. You can see the lines in question here: https://github.com/epicenter-so/epicenter/blob/60f172d193d88...

If it's still an issue, feel free to build it locally on your machine to ensure your supply chain is clean! I'll add more instructions in the README in the future.

I'm no expert, but since it acts as a keyboard wedge it's likely to be unpopular with security software.

This needs to be higher, the installer on the README has a trojan.

More details please? Which installer?

---7.3.0--- This release popped up just a few minutes ago, so VirusTotal results for the 7.3.0 EXE and MSI installers

EXE (still running behavior checks but Arctic Wolf says Unsafe and AVG & Avast say PUP): https://www.virustotal.com/gui/file/816b21b7435295d0ac86f6a8...

MSI nothing flags immediately, still running behavior checks (https://www.virustotal.com/gui/file/e022a018c4ac6f27696c145e...)

---7.2.2/7.2.1 below--- I do note one bit of weirdness, the Windows downloads show 7.2.2 but the download links themselves are 7.2.1. 7.2.1 is also what shows on the release from 3 days ago even though it's numbered 7.2.2.

I didn't check the Mac or Linux installers, but for Windows VirusTotal flags nothing on the 7.2.1/7.2.2 MSI (https://www.virustotal.com/gui/file/7a2d4fec05d1b24b7deda202...) and 3 flags on the EXE (ArcticWolf Unsafe, AVG & Avast PUP) (https://www.virustotal.com/gui/file/a30388127ad48ca8a42f9831...)

Need to run a diff against 7.2.2 tag against 7.3.0; I suspect the issue might be something related to an edit I made on `tauri.conf.json` or one of my Rust dependencies.

We're actively tracking this issue here:

https://github.com/epicenter-so/epicenter/issues/440

Thank you again for bringing this to my attention! Need to step up my Windows development.

Keep in mind that AVG and Avast are owned by the same company now so overlap is likely.

I'm not at my computer but IIRC there was mention of connecting out to a couple of initially unidentifiable domains but a little digging makes it seem they're poorly documented but related to visual studio analytics. I ignored after seeing that.

What does Virustotal say?