• Resolved Peter Pellenaars

    (@petepel)


    Hi,

    thanks for this wonderful minimal theme. I really like it.

    But this morning I noticed a strange looking piece of code in the style.css on line 334.
    To be safe I de-activated the theme and removed it.
    Can someone confirm if this code shouldn’t be there or that I’m wrong with my conclusion that it is malicious?
    I checked all previous version of this theme, but it is there from the beginning.

    regards,

Viewing 7 replies - 1 through 7 (of 7 total)
  • Andrew Nevins

    (@anevins)

    WCLDN 2018 Contributor | Volunteer support

    So what makes you say it’s malicious?

    Thread Starter Peter Pellenaars

    (@petepel)

    I’m not sure. Maybe I shouldn’t use that label. I have no problem to admit that I’m far from an expert on these things.
    It is just that I saw a very lengthy piece of text at the genericon section of the style.css which I have never seen before and wanted to get confirmation via this forum if it could do any harm.
    In the past I had a few painful experiences with my blogsite being infected and am since then extra careful.
    Did you look at it by any chance?

    Andrew Nevins

    (@anevins)

    WCLDN 2018 Contributor | Volunteer support

    That’s fine not to be an expert. It is obfuscated, but you have to go one step further to say it’s malicious.

    See this for decoding base64 http://stackoverflow.com/questions/6920832/how-to-decode-base64-encoded-font-information

    Thread Starter Peter Pellenaars

    (@petepel)

    Point taken.
    What do you advice? Can the title of the topic be changed, or is it better to have it deleted? As I understand now after reading the topic on decoding base64 that nothing is wrong.

    Andrew Nevins

    (@anevins)

    WCLDN 2018 Contributor | Volunteer support

    I can’t see the topic needing moderation, you are allowed to ask this. The theme author should be aware that base64 code gets flagged up by some software as being malicious and so these topics are expected.

    Thread Starter Peter Pellenaars

    (@petepel)

    Ok. Thanks for your feedback.
    I will mark the topic as resolved.

    Moderator cubecolour

    (@numeeja)

    I have changed the topic title so it is framed as a question rather than a statement. This may help anyone else who finds this topic with the same concern.

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Is there Malicious code in style.css?’ is closed to new replies.