Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
HTML · html/all-elements
906cb97e04ec3b0d…
315.5 KB
JPG · image-assets
51d12555d8a599c1…
310.2 KB
HTML · html/all-elements
0e4893dd7630ee77…
291.8 KB
HTML · html/all-elements
e7f6a6f3aa14024a…
289.4 KB
HTML · html/all-elements
2634f98f03c663d2…
287.8 KB
JS · help/assets/js
0a6c4c4db171663b…
242.0 KB
JPG · image-assets
66ea1ac84c543264…
200.7 KB
PNG · image-assets
280ea5a62bb5b50c…
194.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.