Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
HTML · html/hosting/boxed/pennyblack-builder
56a17d0ac217605a…
361.7 KB
HTML · html/hosting/full-width/pennyblack-builder
40b33ed7df7d204d…
360.8 KB
HTML · html/hosting/full-width
7ff7f7f3c9b9d3c5…
315.7 KB
HTML · html/events/boxed/pennyblack-builder
27e3a9cb5eb66fd4…
315.6 KB
HTML · html/hosting/boxed
287dbc4d4b6f1387…
315.5 KB
HTML · html/events/full-width/pennyblack-builder
3f5ff7d433f437a2…
314.8 KB
HTML · html/hosting/boxed
a2c36b9341959049…
313.1 KB
HTML · html/hosting/full-width
b0dd2770c36a7266…
312.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.