Package is not malware. YARA matches are in test files and are likely related to testing SSH functionality. No strong evidence of malware.
No verification record available.
The package is not a malware because the evidences are not strong enough to classify it as malware. The 'very_high_entropy' rule match on a .deflate file is not a strong indicator of maliciousness. The 'hardcoded_host_port_over_10k' rule match in a test file is also not a strong indicator. The 'fake_openssh_0' rule matches in test files are likely related to testing SSH functionality and are therefore not malicious.
