Skip to content

stuff is getting detected as stealers #15404

@GENET1Cyetwrfdv

Description

@GENET1Cyetwrfdv

What happened?

The file C:\Users\myusername\AppData\Local\Temp\gemini-client-error-Turn.run-sendMessageStream-2025-12-21T19-21-57-891Z.json is infected with Generic.PyStealer.AD.3D27F607 and was moved to quarantine.

C:\Users\myusername.gemini\tmp\9254d63da2c65066db8b3be0025f794448de789ae80341e24e7e0bb4a8556d3c\chats\session-2025-12-21T19-19-819dd6d9.json is infected with Generic.PyStealer.AD.C43124FA and was moved to quarantine.

What did you expect to happen?

i expect it to not get detected

Client information

Client Information

CLI Version 0.21.3 │
│ Git Commit d0cdeda
│ Model auto-gemini-3 │
│ Sandbox no sandbox │
│ OS win32 │
│ Auth Method OAuth │
│ User Email ********@gmail.com │
│ IDE Client VS Code

Login information

No response

Anything else we need to know?

No response

Metadata

Metadata

Labels

area/securityIssues related to securityhelp wantedWe will accept PRs from all issues marked as "help wanted". Thanks for your support!priority/p2Important but can be addressed in a future release.type/bug

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions