The package is not a malware because the single YARA rule match is insufficient evidence and the project is popular and trusted.
No verification record available.
The package @babel/parser version 7.27.5 is not a malware. The single YARA rule match python_exec_complex in index.js is not sufficient evidence to classify the package as malware. The matched string $exec within a JavaScript context does not indicate malicious behavior. The babel/babel project is also a very popular and trusted project on GitHub.