Virus found in Local lightning-services php-8.1.29 GS ghostscript

Support
1

What issue or error are you experiencing?

A ghostscript object is marked as infected in my VirusBarrier (now in quarantane)

What steps can be taken to replicate the issue? Feel free to include screenshots, videos, etc

I attach a screenshot with data path

Bildschirmfoto 2025-08-01 um 15.05.53
Bildschirmfoto 2025-08-01 um 15.05.532266×880 122 KB

System Details

  • Local Version: Version 9.2.5+6810

    • Operating System (OS) and OS version: macOS Sonoma 14.7.6

Local Logs

Attach your Local Logs here (Help Doc - Retrieving Local’s Log)

Security Reminder
Local does a pretty good job of scrubbing private info from the logs and the errors it produces, however there’s always the possibility that something private can come through. Because these are public forums, always review the screenshots you are sharing to make sure there isn’t private info like passwords being displayed.

2

This is a false positive.

Ghostscript is a command-line tool for working with PDF files.

WordPress uses this when uploading a PDF to the medial library – it generates an image thumbnail of the PDF.

The specific chain of dependency looks like:

  • When enabled, like in Local, PHP uses the Imagick/ImageMagick extension for working with images and media
  • ImageMagick can be compiled in such a way that it can use Ghostscript to manipulate PDF files
3

Okay, thanks. I will ask at Virus Barrier.

Thanks again,

aquorange