Detected presence of files containing URLs that link to raw files on GitHub. (x4)

Detected presence of files containing domains used for intercepting and inspecting HTTP requests. (x1)

Detected presence of plaintext credentials within network protocol strings. (x1)

Detected presence of files that collect and exfiltrate user information. (x1)

Detected presence of files containing URLs that use suspicious top-level domains. (x1)

Detected presence of software components without a declared source code repository. (x1)

Detected presence of files containing URLs that use non-standard ports. (x4)

Detected presence of files containing bidirectional Unicode control characters. (x1)

Detected presence of software components that can access user identity information. (x1)