Skip to content

[Bug] Antivirus detection: bare-fs.bare flagged as HEUR/APC (possible malware) #1102

@Huwiinn

Description

@Huwiinn

Describe the bug
A clear and concise description of what the bug is.

To Reproduce
Steps to reproduce the behavior:

  1. Go to '...'Describe the bug
    When installing this package via npm, my antivirus software flagged the file bare-fs.bare (located in prebuilds/win32-arm64/) as a potential malware (HEUR/APC).

To Reproduce
Steps to reproduce the behavior:
1. Install the package via npm.
2. Antivirus (e.g., [name of antivirus, e.g., AhnLab V3, Windows Defender, etc.]) scans the node_modules directory.
3. The following file is detected as a potential threat:

•	File Name: bare-fs.bare
•	Path: /Users/[username]/Documents/GitHub/[project]/node_modules/bare-fs/prebuilds/win32-arm64/bare-fs.bare
•	SHA256: 4c7b9bc3bc186efed8d86eb0a3b02face9b0a1a226cd3c79eee0248334dba025
•	Virus Name: HEUR/APC
•	Type: APC/MALWARE

Expected behavior
The package should not be flagged as malware or a potential threat by antivirus programs.

Screenshots / Logs
Attach a screenshot or log file if available.

Additional context
• The antivirus software claims the file is potentially malicious, flagged as “HEUR/APC” (heuristic detection).
• This may be a false positive, but with recent supply chain attacks in npm packages, I wanted to report this for further investigation.
• Please let us know if this file is safe or if further action is needed.

References
• [VirusTotal SHA256 Lookup (link if available)]
• [Any similar reports/issues]

Thank you for your support.

  1. Click on '....'
  2. Scroll down to '....'
  3. See error

Expected behavior
A clear and concise description of what you expected to happen.

Logs/Screenshots
If applicable, add LHCI logs or screenshots to help explain your problem.

Environment (please complete the following information):

  • OS: [e.g. iOS]
  • Browser [e.g. chrome, safari]
  • Version [e.g. 22]

Additional context
Add any other context about the problem here.

Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions