Is the BUG Clicker desktop pet safe to run?

People asking “is bug clicker safe” usually land on articles about auto clickers and malware. This page is about the desktop pet by BUG (@BUGnDEV), the Windows exe and the Mac dmg. It does not click the mouse for you.

What the developer states

• The pet is free. There are no ads and no in-app purchases. Anyone asking for a payment in BUG’s name is not BUG. That warning is on the developer site.
• Updates are applied only when they carry BUG’s own update signature. If a new version cannot start, the previous one is restored.
• The developer says the app blocks other programs from injecting into it, talks to the network only for the update check, and that the typing and music reactions store the moment of a key and the volume, not the characters you typed and not the audio itself.
• A character image you receive is locked to that device and that user.

What I can see without taking the developer’s word

The Windows repository’s file list is a README plus release binaries. There is no public source tree to read. SmartScreen labels BUG-Clicker.exe as Unknown publisher, which matches an unsigned executable. The public release API provides asset identity metadata. Popularity counters do not establish a security verdict.

I found no independent malware-lab write-up on that date. I am not filling the gap with a scanner score. The GitHub Releases API provides SHA-256 digests for matching a download to its release asset; a matching hash is not a malware verdict.

A practical reading

You are trusting a single developer’s unsigned binary and their description of what it does on the network. The description is specific, and the missing source code is also specific. Both belong in the decision. If you want a second person to have compiled it, this project does not offer that.