Hey, an update to my previous post: I’ve suspended this account. Thanks for bringing it to our attention.
On closer inspection I see that they are using a password protected RAR file.
My recommendation: Do not download anything that comes as a password protected archive (typically RAR). We’ve seen a new malicious uploader who is using this approach to try to prevent our automated virus scanner from identifying their projects.
If you come across a page that has a download for a game as a password protected RAR file, and includes the archive password on the page’s description, do not download it and report it.
In the future we will outright ban all password protected archive files. There is no reason to provide something like that as itch.io has access control built in.
Thanks