Powered by SafeDepPowered by SafeDepSingle low-confidence YARA match is insufficient to classify as malware. Suspicious runtime dependency resolution detected in .node file.
No verification record available.
The package @img/sharp-linux-x64 version 0.34.5 is not classified as malware. The only evidence is a low-confidence YARA rule match sus_dylib_tls_get_addr on the sharp-linux-x64.node file, indicating suspicious runtime dependency resolution. While this is concerning, a single low-confidence YARA rule match is insufficient to classify a package as malicious, especially a .node file which can have complex behaviors.