Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · public/js
e2e75a225376139d…
1.77 MB
CSS · public/css
53ced3596f9c19eb…
39.1 KB
PNG · public/img
a913ba92f5c07600…
19.2 KB
PHP · com/classes
4e49bb4bc1d1c7b2…
8.5 KB
JS · public/js
69b5a644410c65de…
3.8 KB
PHP · com/classes
ecdc6b5de51ccdb7…
2.9 KB
PHP · com/classes
dcf8b9cf5d971c65…
2.4 KB
JS · public/js
31b7d610e698bc60…
2.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.