Powered by SafeDepPowered by SafeDepOnly one YARA rule matched a javascript file. This is a known false positive. No other strong evidence of malware.
No verification record available.
The package is not a malware because there is only one YARA rule match. The YARA rule python_exec_complex is matching a *.js file, which is a known false positive. There are no other strong evidences to classify this package as malware.