Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · assets/third-party/quill-emoji
7ee7cf87591ac5c4…
861.8 KB
JS · assets/third-party/quill-emoji
16bff7693c3a4d71…
284.5 KB
JS · assets/third-party/quill-emoji
7e7fcf8be6993e88…
177.9 KB
CSS · assets/third-party/quill-emoji
7e16d77aa36618ad…
99.7 KB
CSS · assets/third-party/quill-emoji
ba258548e4cd2e1c…
86.8 KB
PHP · includes
9c859943ee27174e…
18.8 KB
PNG · assets/css
e5d09040281c6253…
15.9 KB
PNG · assets/css
f9d248e3964def2b…
15.9 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.