Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MAP · assets/js/fine-uploader
20769a16fcaaa272…
611.7 KB
MAP · assets/js/fine-uploader
9197c6f17bb3533d…
599.7 KB
MAP · assets/js/fine-uploader
268f0bb3a8b96e7b…
597.5 KB
MAP · assets/js/fine-uploader
56ae9b4adc61ec41…
585.9 KB
MAP · assets/js/fine-uploader
7229afdb7d847566…
452.1 KB
MAP · assets/js/fine-uploader
a9f2fd5bba18df43…
441.6 KB
JS · assets/js/fine-uploader
cd66741d22975481…
346.0 KB
JS · assets/js/fine-uploader
8b5dc849f3512508…
339.4 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation14
eval (JavaScript)
Executes a string as code
Code execution4
Referenced hosts
8 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.