Detected presence of files with behaviors similar to malicious packages published on NPM. (x1)

Detected presence of malicious files through analyst-vetted file reputation. (x4)

Detected presence of files that collect and exfiltrate user information. (x2)

Detected presence of software components that can access user identity information. (x2)