The package matched YARA rule multiple_gcc_high, but this single low-confidence match is insufficient to classify it as malware.
No verification record available.
The YARA rule multiple_gcc_high matched the file rollup.linux-riscv64-gnu.node. This rule indicates the file was built with multiple versions of GCC. While unusual, this alone is not sufficient evidence to classify the package as malware. It could be due to the build environment or specific compilation process. Without further evidence of malicious intent, it's safer to assume it's not malware.