Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · package root
…
32.79 MB
DB · assets/images
…
19.14 MB
ZIP · package root
…
2.21 MB
ZIP · package root
26f743452219498a…
1.41 MB
JPG · assets/images
b6111af873066694…
740.5 KB
JPG · assets/images
132c5fbb33b46b7a…
709.1 KB
JPG · assets/images
01523be9a35767a0…
696.7 KB
JPG · assets/images
1da0753bcee22fd6…
360.2 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution1
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.