Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · public/images/flags
0741d6d2ec99cf6b…
247.4 KB
SVG · public/images/flags
01b6a8694f8e966d…
210.8 KB
SVG · public/images/flags
cf069a28aadb83cf…
185.8 KB
SVG · public/images/flags
39f422e81bc55c34…
156.0 KB
SVG · public/images/flags
916f2aeddf101ad6…
153.9 KB
SVG · public/images/flags
e4d15a846f802ef2…
144.3 KB
JS · vendor/jvectormap
8b218eb977bb4478…
101.8 KB
SVG · public/images/flags
f0337ada0bb04386…
98.5 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
shell_exec
Runs an operating-system command
System command2
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
exec / system
Runs an operating-system command
System command1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
16 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.