Some jars in $IDE_HOME/lib are different from maven repository


The binary scan tool recognizes that some jar files differ from the officially released version.

For example, the size of $IDE_HOME\lib\commons-lang-2.4.jar is 561kb, but the official version is 256kb. And their MD5 is different.

I inspect the jar and find that there is additional jb/$$size$$ in the META-INF directory. what is this file?


Security team may think that these files are being injected with something. 

I use  IntelliJ IDEA Community Edition 2018.3.2 and  xmlrpc-2.0.1.jar,nanoxml-2.2.3.jar,commons-lang-2.4.jar,trove4j.jar,log4j.jar and jdom.jar have this problem 

Please sign in to leave a comment.