Detected presence of files containing URLs that link to raw files on GitHub. (x1)

Detected presence of files with behaviors exclusively used by malicious software. (x1)

Detected presence of malicious files through analyst-vetted file reputation. (x6)

Detected presence of known software supply chain attack artifacts. (x6)

Detected presence of files containing URLs that use non-standard ports. (x1)