[clamav-users] CVE_2021_4034-9951522 false positives on node executables

[Viktor Rosenfeld]

Hi,

about a month ago I reported a possible false positive on nodejs executables and related files [1]. After checking with Jotti’s Virus Scan and Virustotal, I also (twice) submitted the files to the ClamAV website as false positives [2].

I haven’t received a notification after the false positive submissions and, meanwhile, newer versions of nodejs are still reported as being infected.

What else can I do to verify that this is indeed a false positive?

Best,
Viktor

[1] https://lists.clamav.net/pipermail/clamav-users/2022-June/012717.html
[2] https://www.clamav.net/reports/fp