Received a github advisory stating that this library is malware but I can't find any evidence as to why. Do people think there is any truth to this?