Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · theme
…
4.07 MB
XML · sample-data/exported_files
c9b9736aec588ccb…
1.56 MB
JPG · sample-data/sample_images
2d35c7bfc4d052a7…
458.9 KB
JPG · sample-data/sample_images
f483fecff1134b69…
441.9 KB
PNG · sample-data/sample_images
46f6afca1a52a755…
441.2 KB
PNG · sample-data/sample_images
6bb203812cd30f60…
435.9 KB
JPG · sample-data/sample_images
53f0514530e52d70…
430.0 KB
JPG · sample-data/sample_images
e43ba60d946083b8…
423.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.