Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · 00-Manual_Documentation/assets/js
c501f66000a227cd…
251.0 KB
PNG · 00-Manual_Documentation/img
708e4f2f16ef15e0…
226.5 KB
PNG · 00-Manual_Documentation/img
a65e441f11bb9954…
226.0 KB
ZIP · 02-Mailchimp
a3838cdecaab11db…
219.0 KB
JPG · 00-Manual_Documentation/img/thumbnails
1cf96b6e72c85047…
130.5 KB
JPG · 04-Stampready/Olive_Email/thumbnails
1cf96b6e72c85047…
130.5 KB
HTML · 04-Stampready/Olive_Email
eb5b4bafe7bd117e…
109.2 KB
HTML · 05-Inline_Email
e5043a540eafa6c2…
96.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.