Multiple YARA matches of type very_high_entropy on .png files is not sufficient evidence to classify the package as malware.
No verification record available.
The package is not a malware. The only evidence is multiple YARA rule matches of type very_high_entropy on .png files. This is not sufficient evidence to classify the package as malware. High entropy in image files is not necessarily indicative of malicious behavior, as it can be a characteristic of compressed or encrypted data, or simply complex image data.