Only one low confidence YARA rule matched. High entropy in a gzipped file is not sufficient to classify the package as malware.
No verification record available.
The only evidence is a YARA rule 'very_high_entropy' match on the file package/.yarn/install-state.gz. While high entropy can be a characteristic of obfuscated or compressed data, it's not sufficient evidence to classify the package as malware. Gzipped files will naturally have high entropy, and this file is part of the yarn installation process. Without further supporting evidence, I cannot classify this package as malicious.
