The package is not a malware because the YARA rule match multiple_gcc_high is not strong evidence of malicious behavior.
No verification record available.
The YARA rule multiple_gcc_high matched the file rollup.linux-x64-gnu.node. This rule indicates that the file was built with multiple versions of GCC. While unusual, this is not strong evidence of malicious behavior. It could be due to the build process or dependencies used. Without further evidence, it's not possible to classify this package as malware.