filebouncer - npm package for detecting suspicious uploads.

filebouncer is an npm package for checking uploaded files for structural/security issues.

I started it after going down a rabbit hole with file uploads and discovering that a .jpg can actually be a ZIP too..

That got me looking into things like mime spoofing, polyglots, unsafe archive paths, archive bombs, CSV/spreadsheet injection, etc. The idea is basically to have a lightweight validation layer before your app starts processing an uploaded file.

It's not antivirus, more like "is this file actually what it claims to be, and is its structure something I should be comfortable processing?"

I'm still early in it and mostly building it to learn/explore the problem. I'm curious how other people handle this today, especially in Node. Do you rely on existing libraries, write these checks yourself, or mostly leave it to an antivirus/storage provider?

https://github.com/Ramzi-Abidi/filebouncer