Low stars/forks on the source project isn't enough to call it malware. More evidence needed to confirm malicious activity.
No verification record available.
The package is flagged as having an untrustworthy source project due to low stars and forks. While this raises a flag, it's insufficient to classify the package as malware. Lack of popularity doesn't automatically equate to malicious intent. Without further evidence of malicious code or behavior, it's safer to assume it's not malware.
