Received a github [advisory](https://github.com/advisories/GHSA-fw55-8gwc-gf65) stating that this library is malware but I can't find any evidence as to why. Do people think there is any truth to this?