Detected presence of files with behaviors similar to malicious packages published on PyPI. (x1)

Detected presence of malicious files through analyst-vetted file reputation. (x5)

Detected presence of known software supply chain attack artifacts. (x5)

Detected presence of files containing URLs related to anonymous file-sharing services. (x1)

Detected presence of files that dynamically execute Base-encoded data. (x1)

Detected presence of files with behaviors commonly used by malicious software. (x1)