As far as I know, they didn't check anything. (And neither have I -- no comment on whether this is an AV true positive or false positive.) Here's VirusTotal o

As far as I know, they didn't check anything. (And neither have I -- no comment on whether this is an AV true positive or false positive.) Here's VirusTotal on the tarball (note Chrome blocks its download, for the same reason): https://www.virustotal.com/gui/file/c08e2ba0049307017bf9d8a63dd2a0dfb96aa0cdeb34ae007776e63eba62a26f https://www.virustotal.com/gui/file/c08e2ba0049307017bf9d8a6... Nimda was a Windows malware from 2001. It seems unlikely that would be a meaningful attack vector for a compromised privoxy in 2025. But again, I have not investigated it.