Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPG · theme/assets/images
…
2.71 MB
JSON · theme/assets/plugins/font-awesome/metadata
…
2.65 MB
JS · theme/assets/plugins/font-awesome/js
8277033f6aea0079…
1.06 MB
JS · theme/assets/plugins/apexcharts/dist
62e3376caa7126a9…
1.01 MB
JS · theme/assets/plugins/font-awesome/js
16e8f08eb363930c…
1.01 MB
JPEG · theme/assets/images
8218b4e0bdbe955c…
998.6 KB
JS · theme/assets/plugins/apexcharts/dist
879c7bcc36e4c07b…
967.2 KB
JS · theme/assets/plugins/apexcharts/dist
60166ab1c3a19ee1…
918.2 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation3
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.