Imurmurhash.min.js: PUA.Win.Trojan.Xored-1 FOUND

Self-host
1

Hi!
When running ClamAV 1.3.1 i get the following:

Penpot2.5.2/penpot-backend-2.5.2.tar/blobs/…/opt/node_modules/imurmurhash.min.js: PUA.Win.Trojan.Xored-1 FOUND

I asked a “friend” and it indicate false positive, but also that there seem to be better alternatives to imurmurhash.min.js

Can you consider replacing imurmurhash.min.js with some other hashing library?

2

Hello @Lars

Yes, this is a common false positive as you can see in here more information here: GitHub · Where software is built

Anyway, our team will look into it to decided if we need to take any actions or replacing the library. Thanks for reporting this.

3

Thank you for clarifying and for looking into it further.
Thanks!