Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · WordPress Themes
…
10.74 MB
ZIP · Premium plugins
…
6.83 MB
ZIP · Premium plugins
…
4.30 MB
PNG · Documentation/assets/images
1b18679f7f5199f4…
1.24 MB
ZIP · Premium plugins
3daf22d201793ac0…
1.08 MB
PNG · Documentation/assets/images
f6cb957452c5ea3b…
1.06 MB
PNG · Documentation/assets/images
d203d7c597fa3dcd…
699.4 KB
PNG · Documentation/assets/images
f40f1f18d38b04ad…
626.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
17 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.