The package is not a malware. YARA matches in test and documentation files are likely false positives. The project is popular and legitimate.
No verification record available.
The package is not a malware. The YARA rule obfuscated_payload matched multiple test files (constrained-routes.test.js, hooks.test.js, and stream.1.test.js). Test files often contain payloads for testing purposes, so these matches are likely false positives. The YARA rule content_length_hardcoded matched a documentation file (Delay-Accepting-Requests.md). Hardcoded content lengths in documentation examples are not necessarily malicious. The project has a high number of stars and forks, indicating it is a popular and likely legitimate project.
