MALWARE!

[VA1DER]

Do not use. This is malware. It is simply an obfuscated LUA payload with a lua interpreter.

[VA1DER]

Please see https://discourse.flathub.org/t/package-virtualbox/4347/18 for commentary on why VirtualBox can't be made into a flatpak.

[VA1DER]

There have been two "releases" of this fake VirtualBox, both are still located in https://github.com/johnny24x/VirtualBoxKVMFlatpak/tree/main/Niobite:

1. VirtualBoxKVMFlatpak.zip
2. Virtual-KVM-Flatpak-Box-1.6.zip

The first expands to a lua interpreter and the script "include.lib". The zip file itself and include.lib both have many detections on virustotal:

• Zip file: https://www.virustotal.com/gui/file/67ad0452be14f6b949f8eeb9aa2b5538b4d060c9e4ab725ca635c6d3777f639d
• include.lib: https://www.virustotal.com/gui/file/9d15b70101597522f9143bc249ee646d1667ac08dc8cf0aea6b4f99a851bb227

The second has had the script incorporated into a self-running LUA intepreter, reinit.exe. It has many virustotal detections also:

• reinit.exe: https://www.virustotal.com/gui/file/5b6f8ee0072386b4b63cbcb8f83ef010005d4b6ed3cbd906a094a69726475d62