Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · webfonts
b175cdcb564820dc…
499.7 KB
SVG · webfonts
b24502d966da3ac0…
410.4 KB
SVG · webfonts
554bf0b1eb27004f…
326.0 KB
TTF · webfonts
5e700835ec05293a…
184.1 KB
CSS · css
60b19e5da6a9234f…
152.1 KB
EOT · webfonts
7e330dc533abbb86…
117.9 KB
HTML · Documentation
eedd869842a1ba7b…
114.8 KB
EOT · webfonts
500ef6619a645a0b…
112.4 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.