Summary
The package is not a malware due to YARA rule python_exec_complex matching javascript files, which is a known false positive.
Details
The package is not a malware because the YARA rule python_exec_complex is matching javascript files. This is a known false positive and should not be used to classify the package as malware. There are multiple YARA matches, but they are all of the same type and known to be a false positive in this case.
Evidences
| File | Title | Confidence | |
|---|---|---|---|
package/esm/vs/base/common/observableInternal/observables/baseObservable.js | YARA rule 'python_exec_complex' matched file | Low | |
package/esm/vs/editor/browser/coreCommands.js | YARA rule 'python_exec_complex' matched file | Low | |
package/esm/vs/base/common/glob.js | YARA rule 'python_exec_complex' matched file | Low | |
package/esm/external/vscode-json-languageservice/lib/esm/parser/jsonParser.js | YARA rule 'python_exec_complex' matched file | Low |
Analysis performed at Analysis by