Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · documentation/img/faq-img
1224d1c5c2e15917…
637.5 KB
PNG · documentation/img/faq-img
05861b77d9d10dfb…
522.1 KB
SVG · html_template/assets/img
553eb913250b6fd3…
407.4 KB
PNG · documentation/img/faq-img
56655fd8cf7ba4b9…
364.5 KB
PNG · documentation/img/banner-img
88ac5babc1580288…
360.1 KB
PNG · documentation/img/faq-img
9b3cf4db12608c05…
290.7 KB
PNG · documentation/img/faq-img
6ddcb36117ac321d…
285.2 KB
PNG · documentation/img/faq-img
bed8a2bd3081de34…
239.8 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
shell_exec
Runs an operating-system command
System command2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.