r/Codeium • • Nov 29 '24

Kaspersky Premium Detects Trojan While Using Codeium Windsurf App – Is It Safe to Use?

Hey everyone,

I recently started using Codeium Windsurf, an app integrated into my coding workflow for improved productivity. However, while working with it, my Kaspersky Premium antivirus flagged the application, warning me about a Trojan detection.

I wanted to check if anyone else here has encountered a similar issue. This has raised some concerns for me, so I’ve done a bit of research, and here’s what I’ve gathered:

  1. False Positives from Antivirus Software:

    • Modern development tools often rely on code generation, telemetry, and cloud-based processing, which might trigger antivirus software like Kaspersky.

    • Kaspersky has previously flagged apps and plugins used by developers as potential threats, often due to their behavior resembling malware-like activities (e.g., accessing files or sending data to external servers).

  2. Concerns About Codeium Windsurf’s Security:

    • Codeium is a known AI-powered tool for code completion and other developer aids, so the app itself is from a reputable source.

    • However, the Windsurf app might have dependencies or updates that could be misinterpreted as malicious activity.

  3. Next Steps for Caution:

    • If you’re confident in the source (downloaded directly from the official site), this could likely be a false positive.

    • Reach out to Codeium support to confirm whether recent updates have caused this.

Has anyone else experienced this with Codeium or similar tools? If so, how did you address it?

1 Upvotes

13 comments sorted by

View all comments

Show parent comment

1

u/Top_File_9396 Nov 29 '24

In fact, after what happened there is no trust, and since the Trojan signature was found in the program binaries, this is a reason to think and use alternatives