1.24.0 notgo detected as trojan malware

[shaozi]

With 1.24.0, src/debug/buildinfo/testdata/notgo is classified as trojan malware by virus total:

[seankhliao]

https://golang.org/doc/faq#virus

[seankhliao]

related #71734

[Jorropo]

Why should we care ?
VirusTotal is optimize awesome sensitivity, high false positives rates since it runs 64 different AV and a false flag from any of them warns.

[shaozi]

Interesting. But this notgo binary is it specifically not built by go, right?

[seankhliao]

yes

[gopherbot]

Change https://go.dev/cl/651175 mentions this issue: debug/buildinfo: base64-encode test binaries

[gopherbot]

Change https://go.dev/cl/651235 mentions this issue: [release-branch.go1.24] debug/buildinfo: base64-encode test binaries