Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/js
6b1bfefc5483a90f…
23.9 KB
PHP · src/Provider/Settings
5db75b0eb601fd43…
19.0 KB
PHP · vendor/composer
c944c4b1228ef6be…
15.7 KB
PHP · vendor/composer
c13545b80c74150d…
14.6 KB
PHP · src/Api
35c99cdf4f58a1f2…
10.1 KB
JS · assets/js
782ce2947c1c07ba…
9.1 KB
PHP · src/Provider
352d2b56d9f01752…
8.1 KB
PHP · src/Provider
0447eb466a05ae0c…
6.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation2
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.