Ignore Python comments within two rules (#985)

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>

Author: egibs

rules/exec/install_additional/pip_install.yara

@@ -57,8 +57,12 @@ rule pip_installer_url: critical {
   strings:
     $ref = /pip.{1,5}install.{1,4}https{0,1}:\/\/.{0,64}/
 
+    $not_langchain_comment1 = "Please install the exllamav2 library with (cuda 12.1 is required)"
+    $not_langchain_comment2 = "example : "
+    $not_langchain_comment3 = "\"!python -m pip install https://github.com/turboderp/exllamav2/releases/download/v0.0.12/exllamav2-0.0.12+cu121-cp311-cp311-linux_x86_64.whl\""
+
   condition:
-    filesize < 8192 and $ref
+    filesize < 8192 and $ref and none of ($not*)
 }
 
 rule pip_installer_socket: critical {
@@ -69,8 +73,10 @@ rule pip_installer_socket: critical {
   strings:
     $ref = /pip.{1,5}install.{1,4}socket/
 
+    $not_langchain_comment1 = "\"Please install it with `pip install websocket-client`.\""
+
   condition:
-    $ref
+    $ref and none of ($not*)
 }
 
 rule pip_installer_requests: high {