[elcritch]

The Nim team has been working on the false anti-virus flagging issues: https://forum.nim-lang.org/t/9358

For context apparently Nim had a few articles written on how to write “red team” software with it and it also got popular with malware writers. Ultimately there’s an issue with AVs being lazy and flagging all Nim binaries as malware. Some of them even ignore binaries properly signed with good keys. Just another reason AVs are terrible.

[debugnik]

Glad to see progress on this, because I really liked Nim when I learnt it and this is my only blocker to consider it for a few personal projects.

I understand the necessity to detect known malware, but AVs are definitely terrible if they're unable to fingerprint the actual malicious code rather than the general traits of the toolchain used.

Also, signed binaries have proven close to useless since newly released binaries/installers raise a warning on Windows until several people run them anyway.