Powered by SafeDepPowered by SafeDepMultiple 'STRRat_high' YARA rule matches indicate password stealing behavior in different files, suggesting the package is malicious.
No verification record available.
The package validator version 13.15.22 is flagged as malicious due to multiple matches of the STRRat_high YARA rule across different files (es/lib/normalizeEmail.js, lib/normalizeEmail.js, and validator.min.js). This rule is associated with password stealing behavior, keylogging, and targeting specific browsers and email clients. The presence of these patterns in multiple files suggests malicious intent.