Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · document/js
4a62927a380e201c…
89.5 KB
PNG · publish/images
168d60d63a4248e6…
31.0 KB
PNG · 404/images
168d60d63a4248e6…
31.0 KB
JS · publish/js
9b45ec0e947d8232…
24.6 KB
JS · 404/js
9b45ec0e947d8232…
24.6 KB
PNG · publish/images
75940a0edc910c4e…
17.8 KB
PNG · 404/images
75940a0edc910c4e…
17.8 KB
PNG · publish/images
3eb4d14ad02b1c7f…
10.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
15 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.