Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · core/bundle
a44c9c012edd9255…
510.9 KB
JS · core/bundle/js
61202bec15570404…
169.6 KB
MP3 · core/bundle/sound
ca214bdddd894b4a…
58.2 KB
PNG · core/bundle/img
5dd8b6beb91a83b4…
56.4 KB
JS · core/bundle/js
87a6c4a73157e58b…
55.3 KB
PNG · core/bundle/img
798d8cbccd01cfd9…
45.3 KB
JS · core/bundle/js
ff833161a742764c…
41.8 KB
PNG · core/bundle/img
1d04fec2cd0d829c…
39.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution2
Referenced hosts
18 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.