SafeDep
Install GitHub App
SafeDep
Install GitHub App

Summary

The package is not a malware because the YARA rule match is not strong enough to classify it as malicious.

Verification Record

No verification record available.

Details

The YARA rule multiple_gcc_high matched the file package/lightningcss.linux-arm64-musl.node. This rule indicates that the file was built with multiple versions of GCC. While unusual, this alone is not sufficient evidence to classify the package as malware. It could be due to specific build configurations or dependencies.

lightningcss-linux-arm64-musl@1.32.0Clean
Unverified
Analysed at: 3/9/26, 4:31 AM
Source: https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.32.0.tgz
SHA256: 6d7d1155d4283b7720e9e843aff80706a8d283ff66bb970f24b2f413cd7accc9
Confidence: Medium