SafeDep
Install GitHub App

Summary

The package is not classified as malware due to a single YARA rule match (python_exec_near_enough_decrypt) on a JavaScript file, which is insufficient evidence.

Verification Record

No verification record available.

Details

The YARA rule python_exec_near_enough_decrypt matched on a *.js file. This rule is designed to detect potentially malicious behavior related to encrypted content execution, but its application to a JavaScript file raises concerns about its accuracy in this context. Since there is only one piece of evidence, I cannot classify this package as malware.

@next/env@16.0.7Clean
Unverified
Analysed at: 12/3/25, 3:16 PM
Source: https://registry.npmjs.org/@next/env/-/env-16.0.7.tgz
SHA256: 5c95582715f63de4c62500873404f4942a879c9d21fabb8fe733f27ad8a950b5
Confidence: Medium