Detected presence of web service access tokens. (x1)

Detected presence of plaintext credentials within network protocol strings. (x1)

Detected presence of files with behaviors commonly used by malicious software. (x2)

Detected presence of files containing URLs related to IP querying services. (x2)

Detected presence of software components without a declared source code repository. (x1)

Detected presence of files containing URLs that use non-standard ports. (x4)