Detected presence of files containing URLs that reside in regions with export restrictions by the European Union. (x1)

Detected presence of files containing URLs that link to raw files on GitHub. (x2)

Detected presence of files with behaviors similar to malicious packages published on NPM. (x1)

Detected presence of malicious files through analyst-vetted file reputation. (x4)

Detected presence of known software supply chain attack artifacts. (x4)

Detected presence of files containing URLs related to Discord webhooks. (x1)

Detected presence of files containing URLs that link to Discord attachments. (x1)

Detected presence of files that collect and exfiltrate user information. (x2)

Detected presence of medium severity vulnerabilities. (x1)

Detected presence of software components that can access user identity information. (x2)