Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · asset/libs/html2canvas
e87e550794322e57…
194.0 KB
JS · asset/js
5dd23dfc943550f4…
135.1 KB
PHP · includes
136c32f975132e8c…
47.6 KB
PHP · includes/reports
2ee2b4bce9e8e23a…
45.5 KB
POT · i18n
07121e5770010ffb…
30.6 KB
JS · asset/js/ai-chatbot
5d999dfb03c23bb4…
24.3 KB
CSS · asset/css
f4eb430909636465…
18.8 KB
CSS · asset/css
8e03d8d8b65e88bc…
18.8 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.