Detected presence of known software supply chain attack artifacts. (x4)

Detected presence of malicious files through analyst-vetted file reputation. (x4)

Detected presence of web service access tokens. (x1)

Detected presence of files containing URLs related to Bitcoin exchange services. (x1)

Detected presence of files containing URLs that link to raw files on GitHub. (x1)

Detected presence of software components that were removed from the public package repository. (x1)

Detected presence of software components that have low popularity or number of downloads. (x1)

Detected presence of files with behaviors commonly used by malicious software. (x3)

Detected presence of obfuscated software components. (x2)

Detected presence of files containing URLs that use suspicious top-level domains. (x1)