Can add-ons contain malware?

  Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Post Reply
mameha Offline
Junior Member
Posts: 21
Joined: Jan 2015
Reputation: 0
Post: #1
If I install a repository like superrepo and then install some add-ons from there, am I putting my device at risk of containing malware/virus etc?

I am worried about becoming part of a botnet or having my passwords sniffed etc.
find quote
Martijn Offline
Team Kodi
Posts: 16,541
Joined: Jul 2011
Reputation: 294
Location: Dawn of time
Post: #2
they certainly can yes. They can contain anything from weird code sniffing your computer to infected .zip files.

The XBMC/Kodi repo contains add-ons that are inspected to not have these kind of things.

Read/follow the forum rules.
For troubleshooting and bug reporting, read this first
Interested in seeing some YouTube videos about Kodi? Go here and subscribe
find quote
Steve_uk Offline
Fan
Posts: 300
Joined: Aug 2012
Reputation: 3
Location: UK
Post: #3
(2015-03-04 12:13)Martijn Wrote:  they certainly can yes. They can contain anything from weird code sniffing your computer to infected .zip files.

The XBMC/Kodi repo contains add-ons that are inspected to not have these kind of things.
I didn't realise that Undecided
I've just instated that 3rd party addon for google play music and Picassa bit worried now I just presumed they would be encrypted
find quote
peppe_sr Offline
Posting Freak
Posts: 1,203
Joined: Mar 2006
Reputation: 15
Location: Italia, Sicilia, Siracusa
Post: #4
use an antivirus may help you.
find quote
Steve_uk Offline
Fan
Posts: 300
Joined: Aug 2012
Reputation: 3
Location: UK
Post: #5
(2015-03-04 12:36)peppe_sr Wrote:  use an antivirus may help you.
On Kodi??
Didn't know there was one
find quote
da-anda Offline
Team-Kodi Member
Posts: 5,553
Joined: Jun 2009
Reputation: 71
Location: germany
Post: #6
Python addons can do anything with your system - so don't trust any random addon and in doubt download, unzip and review the addon.

@Steve_uk - Addons discussed and developed in our forums are usually save to use. I'm using the GMusic addon myself and checked it's code. Besides the fact that the password is not stored encrypted (a feature Kodi unfortunately lacks) all seems to be fine.
And there is no antivirus in Kodi - your OS has to provide one if you want one
(This post was last modified: 2015-03-04 13:22 by da-anda.)
find quote
Steve_uk Offline
Fan
Posts: 300
Joined: Aug 2012
Reputation: 3
Location: UK
Post: #7
(2015-03-04 13:21)da-anda Wrote:  Python addons can do anything with your system - so don't trust any random addon and in doubt download, unzip and review the addon.

@Steve_uk - Addons discussed and developed in our forums are usually save to use. I'm using the GMusic addon myself and checked it's code. Besides the fact that the password is not stored encrypted (a feature Kodi unfortunately lacks) all seems to be fine.
And there is no antivirus in Kodi - your OS has to provide one if you want one
Thanks for the reply glad the Gmusic one is OK.
I got the Picassa one from the official repo so I guess I'm good to go now Smile
Cheers
find quote
Martijn Offline
Team Kodi
Posts: 16,541
Joined: Jul 2011
Reputation: 294
Location: Dawn of time
Post: #8
In general we advise common sense. Be aware of what you install.

Read/follow the forum rules.
For troubleshooting and bug reporting, read this first
Interested in seeing some YouTube videos about Kodi? Go here and subscribe
find quote
wpbpete Offline
Senior Member
Posts: 175
Joined: Feb 2013
Reputation: 2
Post: #9
Let me add that when you delete any dubious repo or add-on, you may need to search all your drives and files for any remnants of it. Once, I had an add-on that kept updating itself from the XBMC backup fileTongue
find quote