Only one low confidence YARA rule matched. It is not sufficient to classify the package as malware.
No verification record available.
The package is not a malware because there is only one YARA rule match with low confidence. The matched pattern semicolon_relative_path_high could be a false positive.