Single low confidence YARA rule match in a definition file is insufficient to classify as malware. Likely a false positive.
No verification record available.
The single YARA rule match hardcoded_host_port_over_10k with low confidence and a single match of $h_domain_tld in a .d.ts file (definition file) is not sufficient evidence to classify the package as malware. Definition files often contain examples and placeholders, which could explain the presence of a hardcoded host and port.