Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · core/vendor/select2/js
ba0664111e4e0041…
169.5 KB
JS · dist
d13f78985d9fbd15…
158.4 KB
JS · dist
8705987439fbbe5b…
153.6 KB
JS · core/vendor/select2/js
46716cb20114cd73…
150.0 KB
JPG · core/images
bdf4d6670908d5b0…
120.0 KB
JS · core/vendor/select2/js
5c6fdab80cb86a27…
77.4 KB
JS · core/vendor/select2/js
c8467b98f112bb1b…
69.2 KB
PHP · core/classes
141936a47cc66637…
52.2 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
9 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.