ClamAV Flagging Node Module As Trojan

[BPowell76]

I was scanning iD 2.30.4 with the latest signatures for ClamAV and it's coming back saying the imurmurhash/imurmurhash.min.js in node_modules is a Trojan (PUA.Win.Trojan.Xored-1).

Not sure if this is a false positive or not, but it might be worth looking into.

[1ec5]

This file isn’t part of iD proper; it pulls in imurmurhash-js v0.1.4, the latest version, via NPM when you install dependencies:

iD/package-lock.json

Line 3722 in 3025d4f

"imurmurhash": "^0.1.4",

Fortunately, it’s a false positive: jensyt/imurmurhash-js#1.

[BPowell76]

Thanks for confirming. I suppose if ClamAV is saying it's a PUA it could be a false positive as it also flagged the package in other github forks I was working on.