The package contains an embedded executable, but given the project's legitimacy, it's likely a pre-compiled binary and not malware.
No verification record available.
The package @esbuild/netbsd-arm64 contains an embedded executable package/bin/esbuild. While this could be a potential security risk, the esbuild project is a legitimate and popular project with a large number of stars and forks on GitHub. The embedded executable is likely a pre-compiled binary, which is a valid use case. Without further evidence of malicious behavior, it is not possible to classify this package as malware.
