The package is not a malware because the YARA rule python_exec_complex matched on non-python source files, which is a known false positive.
No verification record available.
The package is not a malware because the YARA rule python_exec_complex matched on non-python source files (index.cjs and index.js). This is a known false positive scenario. There is no other evidence to suggest that this package is malicious.