getting a modified security alert from little snitch from certain installs

[akagumo]

Output of brew config

HOMEBREW_VERSION: 7.0.9
ORIGIN: https://github.com/Homebrew/brew
HEAD: cdc1ca503231b9a96da64526774915d913c3ec9f
Last commit: 4 days ago
Branch: stable
Core tap: N/A
Core cask tap: N/A
HOMEBREW_PREFIX: /opt/homebrew
Homebrew Ruby: 4.0.7 => /opt/homebrew/Library/Homebrew/vendor/portable-ruby/4.0.7/bin/ruby
CPU: 16-core 64-bit arm_brava
Clang: 21.0.0 build 2100
Git: 2.54.0 => /Library/Developer/CommandLineTools/usr/bin/git
Curl: 8.7.1 => /usr/bin/curl
macOS: 26.7.1-arm64
CLT: 27.0.0.0.1788430756
Xcode: N/A
Rosetta 2: false

Output of brew doctor

Your system is ready to brew.

Description of issue

I have been running brew for a long time. I use brew for many things. yesterday for first time I got some little snitch alerts.
Program modification warning, "The program has been modified!"
I run yt-dlp and it calls python. then little snitch shows alert that python has been modified.
I reinstalled python, but same alert.

https://help.obdev.at/littlesnitch6/alert-warnings?highlight=program+modified

I also got the same alert with httpd. I reinstalled.

is my computer infected with malware? or is there something causing little snitch to see these brew installs as modified but are not? anyone else have this issue?

[p-linnane]

Homebrew’s yt-dlp package was updated to use Python 3.15 today. Changing the Python executable can trigger Little Snitch’s identity warning. Reinstalling Python would not necessarily resolve a mismatch with its saved rule. The warning alone does not indicate malware.