Package has credential harvesting behaviour and found in known malicious campaign.

Note: This report is updated by a verification record