No verification record available.

The package is not a malware because there is only one YARA rule match (semicolon_relative_path_high) with low confidence. The matched pattern also appears to be part of an error message, which can occur in legitimate software. Without more evidence, it is not possible to classify this as malware.