Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPG · assets/images
…
6.17 MB
JPG · assets/images
fc8b081d0643ba2b…
96.3 KB
CSS · assets/css
760f04b6787e7600…
25.5 KB
CSS · assets/css
a064c29188cf5b0b…
25.5 KB
PHP · vendor/composer
d4b2313e562edf94…
16.0 KB
PHP · vendor/composer
21f4ba19e7859cb3…
15.8 KB
JS · assets/js
f681e8edcaec5876…
13.8 KB
CSS · assets/css
6016ea38df1e8975…
12.0 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
12 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.