X_STORAGE_UPLOAD_INFECTED
Means
the upload scanner found malware in the file
Typical cause
promoteAttachment ran the uploadScanner installed in runtime.ts over its per-attempt copy (pending/scan/) and it answered infected; the pending upload and that copy are deleted, and the row's key is never written
Fix
grantUpload({ disk, orgId, request }) for a new, clean file (this one is gone; meta.signature names the detection)