Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPG · dist/assets/images
…
3.98 MB
JPG · dist/assets/images
…
3.40 MB
JPG · dist/assets/images
6318da53050adea3…
1.54 MB
JPG · dist/assets/images
cb8ae69be99cb3c3…
1.30 MB
JPG · dist/assets/images
ddd9f82030611476…
764.8 KB
JPG · dist/assets/images
39c1dcaf793f89cb…
665.8 KB
JPG · dist/assets/images
3df75584d485433c…
588.5 KB
JPG · dist/assets/images
6b206292d41893e7…
568.9 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.