ClamAV has produced some unexpected results from a recent scan:
Are the files in libxkbcommon and node_modules really trojans and exploits, or is this an example of Clam not doing what it's supposed to do?
If the latter, how can Clam be made more useful?
clamscan --version
in your question.