Alex@rtnVFRmedia Suffolk UK is a user on social.tchncs.de. You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.

Wow, FileZilla’s bundled installer includes a malware downloader and the dev defends it horribly.

If using FileZilla, uninstall and find something else. Even if this issue is fixed, the morally ambiguous and defensive response is very concerning.

forum.filezilla-project.org/vi

@entreprelife searched through their wiki and their website for "bundle" to find any explanation of what is "bundled".

Not a single hit.

Ugh, now I need a different decent SFTP client for Windows to recommend to people.

@rysiek @entreprelife WinSCP is pretty good (but I don't know if their installer is bundleware-free either)
Alex@rtnVFRmedia Suffolk UK @vfrmedia

@elomatreb @rysiek @entreprelife

I use it quite often and installed a new version recently.

It did have some "sponsored link" in the install but does not appear to auto install any part of the thing being advertised, you would have to specifically click on the big picture in the middle (nor are there other dodgy things like swapping round the order of accept/decline icons either like some other "freeware" does)