The package @esbuild/openbsd-x64 contains an embedded executable file package/bin/esbuild. While this raises a flag, it is not sufficient evidence to classify the package as malware. There are legitimate uses for embedding executables, such as pre-compiled binaries. Without further evidence of malicious behavior, it's safer to assume it's a legitimate use case.