Detected presence of files containing URLs that link to raw files on GitHub. (x2)

Detected presence of files containing URLs related to Bitcoin exchange services. (x2)

Detected presence of files with behaviors similar to malicious packages published on NPM. (x1)

Detected presence of web service access tokens. (x2)

Detected presence of malicious files through analyst-vetted file reputation. (x8)

Detected presence of files containing URLs that use suspicious top-level domains. (x2)

Detected presence of obfuscated software components. (x2)

Detected presence of files containing URLs that use non-standard ports. (x2)

Detected presence of files containing bidirectional Unicode control characters. (x2)