server-virus-scanning.js

const NodeClam = require('clamscan');

module.exports = async function scanFile(filePath) {

  console.log(`Attempting virus scan for ${filePath}`);

  const clamscan = await new NodeClam().init({
    remove_infected: true,
    debug_mode: false,
    scan_recursively: false,
    clamdscan: {
      socket: process.env.CLAMDSCAN_SOCKET || '/var/run/clamav/clamd.ctl',
      timeout: 120000,
      local_fallback: true,
      path: process.env.CLAMDSCAN_PATH || '/var/lib/clamav',
      config_file: process.env.CLAMDSCAN_CONFIG_FILE || '/etc/clamav/clamd.conf'
    }
  });

  const { is_infected, viruses } = await clamscan.scan_file(filePath);

  if (is_infected) {
    console.error(`Virus scan failed, file INFECTED`, { filePath, viruses });
  } else {
    console.log(`Virus scan OK`, { filePath });
  }

  return { is_infected, viruses };
};