The package matched YARA rule multiple_gcc_high, indicating it was built with multiple GCC versions, but this is not sufficient evidence to classify it as malware.
No verification record available.
The YARA rule multiple_gcc_high matched the file rollup.linux-riscv64-gnu.node. This rule indicates that the file was built with multiple versions of GCC. While this might be unusual, it doesn't inherently mean the package is malicious. It could be due to the build environment or cross-compilation practices. Without further evidence, it's not possible to classify this package as malware.