Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · package root
5e7a35fad3446c32…
1.36 MB
XML · sample_data
c9d3e380b5acb64e…
1.05 MB
ZIP · plugin
9cc0142a2ab487af…
975.4 KB
JS · assets/js
0a6c4c4db171663b…
242.0 KB
JPG · assets/images
e1bd5ec79993fb51…
197.8 KB
JPG · assets/images
a5bbb92ff1de4ca3…
192.8 KB
JPG · assets/images
fc9998f13eb25709…
108.6 KB
JPG · assets/images
3305cacd8c2b13d3…
82.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.