Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPG · assets/demo-1-images
2499d5ce9efb5ebf…
599.8 KB
DB · assets/demo-1-images
2967dd91804b587e…
574.0 KB
JPG · assets/demo-1-images
9fe536b381a20825…
552.1 KB
JPG · assets/demo-2-images
a7a95ee6f23b01d5…
482.9 KB
HTML · html/demo-1
72d9ce6c4104aa86…
413.5 KB
JPG · assets/demo-1-images
818b4b442cdd5435…
403.0 KB
HTML · html/demo-1
7536c8c335e9f334…
394.3 KB
HTML · html/demo-1
645374c48c98cf20…
390.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.