# Source: https://huggingface.co/docs/hub/security-malware.md

# Malware Scanning

We run every file of your repositories through a [malware scanner](https://www.clamav.net/).

Scanning is triggered at each commit.

Here is an [example view](https://huggingface.co/mcpotato/42-eicar-street/tree/main) of an infected file:

> [!TIP]
> If your file has neither an ok nor infected badge, it could mean that it is either currently being scanned, waiting to be scanned, or that there was an error during the scan. It can take up to a few minutes to be scanned.

If at least one file has a been scanned as unsafe, a message will warn the users:

> [!TIP]
> As the repository owner, we advise you to remove the suspicious file. The repository will appear back as safe.