The YARA rule python_exec_near_enough_decrypt matched a non-python file, which is a known false positive. Thus, not classified as malware.
No verification record available.
The YARA rule python_exec_near_enough_decrypt matched a non-python source file (index.js). This is a known false positive scenario. Therefore, based on the provided evidence, the package is not classified as malware.