JS:Protenxy-Z [Trj]- Virus Alert with Avast

[delafuentej]

Many times when I try to install @react-three/drei together with @react-three/fiber in a project, I get an alert in my Avast antivirus when I try to lift the application: ‘We have put the @react-three_drei.js file in Quarantine because it was infected with malware: JS:Protenxy-Z[Trj]. Does anyone know what this is and how to fix it? Thanks in advance.

[JamesMasino]

This seems to be a known false flag on Avast and several other virus scanners, I opened an issue thread for this: #2239

Nobody has tracked down exactly what's causing it, and Avast hasn't offered much information about it. I personally think it's flagging an older threat pattern that's no longer an issue, I've developed with the drei library extensively and haven't had any problems. I have the file exempt from being quarantined.