{
 "schema_version": "1.0",
 "generated_at": "2026-11-07T18:30:10Z",
 "last_checked": "2026-11-07T17:33:08+00:00",
 "agent_rules": [
  "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.",
  "Never install, update, uninstall or change settings without the user's clear OK for that exact step.",
  "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.",
  "If you cannot tell whether the user is affected, say so plainly instead of guessing.",
  "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."
 ],
 "product": {
  "slug": "time4popcorn",
  "name": "Popcorn Time (Time4Popcorn)",
  "short_name": "Popcorn Time",
  "page_url": "https://patchgap.ai/is-my-popcorn-time-up-to-date/",
  "minimum_safe_version": null,
  "minimum_safe_version_source": [],
  "baseline": {
   "version": null,
   "applies_to": null,
   "source_incident": null,
   "sources": [],
   "covers_everything_listed": false,
   "caveats": [
    "No version fixes these yet: popcorn-time-time4popcorn-dead-updater. Follow the steps on their pages."
   ],
   "text": "No version of Popcorn Time is safe from everything listed here yet. Follow the steps on each problem's page."
  },
  "update_steps": {
   "windows": [
    "There is no safe update. Remove the app."
   ],
   "macos": [
    "There is no safe update. Remove the app."
   ]
  },
  "last_checked": "2026-11-07T17:33:08+00:00",
  "vendor": "Time4Popcorn",
  "category": "apps",
  "platforms": [
   "windows",
   "macos"
  ],
  "what_it_is": "A movie-streaming app that downloads from file-sharing networks. It is no longer kept up to date.",
  "url": "https://patchgap.ai/is-my-popcorn-time-up-to-date/",
  "json_url": "https://patchgap.ai/products/time4popcorn.json",
  "official_site": null,
  "official_download": null,
  "how_it_updates": "There is no safe update. The advice is to remove the app.",
  "check": {
   "windows": {
    "menu_path": "Start > Settings > Apps > Installed apps. Search for \"Popcorn\".",
    "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Popcorn*' | Select-Object DisplayName,DisplayVersion; Get-Process | Where-Object ProcessName -like '*popcorn*' | Select-Object ProcessName,Id",
    "shell": "PowerShell",
    "read_only": true
   },
   "macos": {
    "menu_path": "Open Finder > Applications and look for Popcorn Time or Time4Popcorn.",
    "command": "ls /Applications | grep -i popcorn",
    "shell": "Terminal",
    "read_only": true
   }
  },
  "open_incidents": [
   "popcorn-time-time4popcorn-dead-updater"
  ]
 },
 "incidents": [
  {
   "id": "popcorn-time-time4popcorn-dead-updater",
   "url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater/",
   "path": "/incidents/popcorn-time-time4popcorn-dead-updater/",
   "json_url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater.json",
   "title": "Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix. Remove it.",
   "category": "apps",
   "platforms": [
    "windows",
    "macos"
   ],
   "products": [
    "time4popcorn"
   ],
   "status": "no-patch",
   "status_label": "No patch yet",
   "severity": "critical",
   "severity_source": "NVD score 9.8 out of 10 (CVE-2026-30612)",
   "exploited_in_wild": "unknown",
   "exploited_note": "A security company (Eye Research) used the hole to switch the updater off, from Nov 2025 to Mar 2026. We found no report of criminals using it.",
   "exploited_source_url": "https://labs.eye.security/operation-ixim-preventing-a-botnet-of-millions-of-popcorn-time-users/",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-08-27",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-30612"
   ],
   "summary": "Time4Popcorn is an old movie-streaming app. Its updater looked for updates at a web address nobody owned any more and did not check who sent the update. Anyone who took over that address could send code to every computer with the app. A security company found this and switched the updater off. The app is no longer kept up to date, so there is no real fix. The safe move is to remove it.",
   "am_i_affected": "You are affected if you ever installed Popcorn Time or Time4Popcorn on Windows or Mac. Check Start > Settings > Apps (Windows) or Finder > Applications (Mac).",
   "action": "Remove Popcorn Time (Time4Popcorn). There is no fix",
   "affected": [
    {
     "product": "time4popcorn",
     "product_name": "Popcorn Time (Time4Popcorn)",
     "platform": "windows",
     "affected_versions": "Time4Popcorn for Windows 6.2.1.18 and older",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "No fixed version exists.",
     "fixed_source_urls": [
      "https://nvd.nist.gov/vuln/detail/CVE-2026-30612"
     ],
     "check": {
      "menu_path": "Start > Settings > Apps > Installed apps. Search for \"Popcorn\".",
      "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Popcorn*' | Select-Object DisplayName,DisplayVersion; Get-Process | Where-Object ProcessName -like '*popcorn*' | Select-Object ProcessName,Id",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": null
    },
    {
     "product": "time4popcorn",
     "product_name": "Popcorn Time (Time4Popcorn)",
     "platform": "macos",
     "affected_versions": "Time4Popcorn for Mac 6.2.1.17 and older",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "No fixed version exists.",
     "fixed_source_urls": [
      "https://nvd.nist.gov/vuln/detail/CVE-2026-30612"
     ],
     "check": {
      "menu_path": "Open Finder > Applications and look for Popcorn Time or Time4Popcorn.",
      "command": "ls /Applications | grep -i popcorn",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": null
    }
   ],
   "fix_steps": [
    "Close the app.",
    "Windows: Start > Settings > Apps > Installed apps. Find Popcorn Time or Time4Popcorn, click the three dots, then Uninstall.",
    "Mac: open Finder > Applications, drag the app to the Trash, then empty the Trash.",
    "Run a scan with your antivirus after you remove it.",
    "Change important passwords if you are worried. Do this from another, clean device."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: uninstall apps in Windows",
     "url": "https://support.microsoft.com/windows/uninstall-or-remove-apps-and-programs-in-windows-4b55f974-2cc6-2d2b-d092-5905080eaf98"
    },
    {
     "label": "Apple: uninstall apps on your Mac",
     "url": "https://support.apple.com/guide/mac-help/uninstall-apps-mh35835/mac"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30612",
     "title": "NVD: CVE-2026-30612 (Time4Popcorn)",
     "date": "2026-08-27",
     "kind": "nvd",
     "official": true
    },
    {
     "url": "https://labs.eye.security/operation-ixim-preventing-a-botnet-of-millions-of-popcorn-time-users/",
     "title": "Eye Research: Operation IXIM, preventing a botnet of millions of Popcorn Time users",
     "date": "2026-10-22",
     "kind": "research",
     "official": false
    }
   ]
  }
 ]
}