-
Notifications
You must be signed in to change notification settings - Fork 682
Description
Describe the bug
A clear and concise description of what the bug is.
To Reproduce
Steps to reproduce the behavior:
- Go to '...'Describe the bug
When installing this package via npm, my antivirus software flagged the file bare-fs.bare (located in prebuilds/win32-arm64/) as a potential malware (HEUR/APC).
To Reproduce
Steps to reproduce the behavior:
1. Install the package via npm.
2. Antivirus (e.g., [name of antivirus, e.g., AhnLab V3, Windows Defender, etc.]) scans the node_modules directory.
3. The following file is detected as a potential threat:
• File Name: bare-fs.bare
• Path: /Users/[username]/Documents/GitHub/[project]/node_modules/bare-fs/prebuilds/win32-arm64/bare-fs.bare
• SHA256: 4c7b9bc3bc186efed8d86eb0a3b02face9b0a1a226cd3c79eee0248334dba025
• Virus Name: HEUR/APC
• Type: APC/MALWARE
Expected behavior
The package should not be flagged as malware or a potential threat by antivirus programs.
Screenshots / Logs
Attach a screenshot or log file if available.
Additional context
• The antivirus software claims the file is potentially malicious, flagged as “HEUR/APC” (heuristic detection).
• This may be a false positive, but with recent supply chain attacks in npm packages, I wanted to report this for further investigation.
• Please let us know if this file is safe or if further action is needed.
References
• [VirusTotal SHA256 Lookup (link if available)]
• [Any similar reports/issues]
Thank you for your support.
- Click on '....'
- Scroll down to '....'
- See error
Expected behavior
A clear and concise description of what you expected to happen.
Logs/Screenshots
If applicable, add LHCI logs or screenshots to help explain your problem.
Environment (please complete the following information):
- OS: [e.g. iOS]
- Browser [e.g. chrome, safari]
- Version [e.g. 22]
Additional context
Add any other context about the problem here.
