The package is not a malware because the YARA rule python_exec_complex matched on non-python source files, which is a known false positive.
No verification record available.
The package is not a malware because the YARA rule python_exec_complex matched on non-python source files (index.cjs and index.js). This is a known false positive scenario. There are no other strong evidences to classify this package as malware.