Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/js
7fe0258215c48485…
841.6 KB
TTF · assets/webfonts
6d53c706f3b7178c…
388.4 KB
JS · admin/assets/js
8041580f8070de25…
183.8 KB
TTF · assets/webfonts
c7ae37d35b8edd32…
181.8 KB
MAP · view/blocks/build
0230569f5430886c…
162.2 KB
WOFF2 · assets/webfonts
d27bc752105c079f…
146.9 KB
PHP · admin/fields/typography
3a62c819d3ef1780…
120.4 KB
JS · view/blocks/build
87e872101a99a62f…
119.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
13 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.