Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · attex_php/assets/fonts
…
2.01 MB
MAP · attex_php/assets/css
b1788df2072fa186…
1.51 MB
SVG · attex_php/assets/fonts
fa1d72882f183904…
1.30 MB
MAP · attex_php/assets/css
6449ee3772eea9e8…
942.9 KB
JS · attex_php/assets/vendor/highlightjs
c9e3265251db9374…
731.8 KB
MAP · attex_php/assets/css
5719a9c56a342cde…
562.1 KB
JS · attex_php/assets/vendor/apexcharts
c8d97c6425210d45…
525.7 KB
CSS · attex_php/assets/css
ce939e92b824e42d…
489.8 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution17
atob
Decodes base64 in the browser
Obfuscation4
eval (JavaScript)
Executes a string as code
Code execution2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.