Detected presence of files containing URLs that link to raw files on GitHub. (x4)

Detected presence of files with behaviors similar to malicious packages published on NPM. (x4)

Detected presence of files containing URLs that use non-standard ports. (x10)

Detected presence of software components that can access user identity information. (x3)

Detected presence of files containing bidirectional Unicode control characters. (x12)