Antivirus False Positives for pieces-cli

[nathan-courtney-pieces]

Overview

Our CLI tool pieces-cli (specifically the pieces.exe binary) has been flagged by multiple antivirus vendors as potentially malicious, resulting in rejection from package repositories like Chocolatey. We want to address this issue transparently and provide information to help users understand these detections.
Current Status

File: pieces.exe (hash: 0b99e3a871e5682596b162923f71ef3a2e79af19b863f850afc6fae6455c8e)
Detection Count: 9 out of 72 security vendors flagged this file as malicious
Impact: Package submission to Chocolatey has been rejected due to these detections

Detection Details

Based on VirusTotal analysis, the following vendors have flagged our binary:

Avast: Win64:Malware-gen
AVG: Win64:Malware-gen
Bkav Pro: W64.AIDetectMalware
DeepInstinct: MALICIOUS
Fortinet: PossibleThreat.RF
SecureAge: Malicious
SentinelOne: Static.AI - Suspicious.PE
Skyhigh (SWG): BehavesLike.Win64.FareIt.rc
Trellix ENS: Artemis!E34F9B448D24

Our Position

In full transparency and to the best of our well researched knowledge: pieces-cli does not contain any malicious code or behavior. These appear to be false positive detections, likely triggered by:

Legitimate executable behavior that may appear suspicious to heuristic scanners
Code signatures or patterns that resemble those found in other software
Aggressive heuristic detection by some antivirus engines

What We're Doing

Investigating the specific characteristics that might be triggering these detections
Reviewing our build process to identify any practices that might contribute to false positives

For Users

If you encounter antivirus warnings when using pieces-cli:

These detections appear to be false positives based on our analysis
You can verify the file hash matches what we've published
Consider adding an exception in your antivirus software if you trust our software
Always exercise caution and only download from official sources

Community Input Welcome

We welcome feedback from the community, especially:

Reports of similar issues with other CLI tools
Suggestions for reducing false positive rates
Experience with antivirus vendor false positive reporting processes
General advice on executable distribution best practices

Updates

This discussion will be updated as we make progress on resolving these detections.

Team: Mesh Intelligent Technologies, Inc.
Contact: For security concerns, please contact us directly through our official channels.