enhanced-resolve is not malware. YARA rule python_exec_complex matches are likely false positives in JavaScript files.
No verification record available.
The package enhanced-resolve version 5.18.4 is not classified as malware. Although the YARA rule python_exec_complex matched in two different files (ExportsFieldPlugin.js and ImportsFieldPlugin.js), this rule is known to produce false positives when matching non-python files. The matched pattern $exec appears to be related to regular expression execution, which is a common operation in JavaScript files and not necessarily indicative of malicious behavior. Since there is no other strong evidence, the package is considered safe.
