Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPG · package root
4ea787b7f790759a…
470.2 KB
JPG · package root
c96bf51d6894e6dc…
438.2 KB
MAP · assets/css
aaf99fdfeec73316…
240.2 KB
SVG · package root
b751f81b4b0db77c…
197.4 KB
JPG · package root
5a9fcb6f2845252c…
127.8 KB
CSS · assets/css
0e430441e9833f9e…
118.4 KB
CSS · assets/css
e9503448692b738d…
97.6 KB
JS · assets/js
2e945ebcd9b955e7…
94.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
12 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.