Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · assets/img
988804bc6c260a8c…
1.09 MB
PNG · assets/img
4b08bd9a3a90cfd3…
774.1 KB
PNG · assets/img
d9b223b90b277e5b…
762.2 KB
SVG · assets/img/svg
97b71a0f1ccf9115…
552.3 KB
SVG · assets/fonts
ad6157926c1622ba…
434.0 KB
PNG · assets/img
369d6c81dcb769c8…
290.3 KB
PNG · assets/img
8f4e10b2ca1cd2a2…
286.4 KB
PNG · assets/img
edbe9b062b26a825…
284.7 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
19 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.