The package @esbuild/linux-arm64 version 0.27.0 contains an embedded executable package/bin/esbuild. While this raises a flag, embedded executables are common in legitimate packages, especially for pre-compiled binaries. Without further evidence of malicious behavior, it's not possible to classify this package as malware.