clamav

n8n community node for ClamAV antivirus scanning via clamd TCP socket (SCAN, INSTREAM, STATS, batch directory scan, real-time monitor)

Documentation

@lowwattlabs/n8n-nodes-clamav

n8n community node for ClamAV antivirus scanning — scan files and directories for malware directly from your n8n workflows via clamd TCP socket.

npm version
GitHub

⚡ Get a License

$5 one-time purchase — Buy now →

Self-hosted ClamAV is free. The license covers priority support and commercial deployment.

Features

  • SCAN — scan files/paths for malware
  • INSTREAM — stream content scanning for large files
  • STATS — real-time ClamAV daemon statistics
  • Batch directory scan — scan entire directories recursively
  • Real-time monitor — watch a directory and auto-scan new/modified files
  • Full clamd protocol support over TCP socket

Install

npm install @lowwattlabs/n8n-nodes-clamav

Or install via n8n Community Nodes — search for "ClamAV" in your n8n instance.

Prerequisites

  • ClamAV daemon (clamd) running and accessible via TCP
  • n8n >= 1.0.0

Configuration

Add your ClamAV credentials in n8n:

  1. Go to Credentials → Add Credential → ClamAV API
  2. Enter your clamd host (default: 127.0.0.1) and port (default: 3310)

Usage

Scan a File

{
  "operation": "scan",
  "path": "/tmp/suspicious-file.exe"
}

Batch Scan a Directory

{
  "operation": "batchScan",
  "path": "/var/uploads",
  "recursive": true
}

Get Daemon Stats

{
  "operation": "stats"
}

License

MIT © Low Watt Labs

Discussion