// Hacker Noon · 30 April 2026

Most Node.js Apps Using ClamAV Have the Same Bug. Here's What It Is.

Calling ClamAV from Node.js looks easy: spawn clamscan, check the exit code, done. But the standard implementation has a silent bug — exit code 2 means "scan could not complete," not "clean," and almost every custom wrapper collapses it into one of the other two outcomes. The result is a false-clean...

Hacker Noon

@hacker-noon · SonoTommy

hackernoon.com

Hacker Noon@hacker-noon