Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · datatables
0863eff9c2774b11…
523.8 KB
JS · datatables/DataTables-1.10.16/js
cad275cd9985e1cd…
435.3 KB
JS · datatables
f531479b7b830b70…
110.8 KB
JS · datatables/DataTables-1.10.16/js
a9c575c2bf9b9f83…
80.0 KB
PHP · package root
e936c3616be1d111…
38.4 KB
JS · datatables/Responsive-2.2.0/js
7d32fa3bbd18a35f…
36.4 KB
JS · datatables/ColReorder-1.4.1/js
45a20390a8572502…
35.3 KB
TXT · package root
3972dc9744f6499f…
34.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
19 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.