rm -rf detected in package.json's clean script. It's a common practice and not enough evidence to classify as malware.
No verification record available.
The YARA rule background_rm_rf matched the package.json file. The matched pattern rm -rf is commonly used in build scripts to clean up directories. While rm -rf can be dangerous if misused, its presence in a package.json script is not sufficient evidence to classify the package as malware. The matched lines appear to be part of clean script, which is a common practice.