Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/js
7fe0258215c48485…
841.6 KB
TTF · assets/webfonts
6d53c706f3b7178c…
388.4 KB
JS · admin/csf/assets/js
8041580f8070de25…
183.8 KB
TTF · assets/webfonts
c7ae37d35b8edd32…
181.8 KB
MAP · view/block/build
941664607d025aa0…
157.6 KB
WOFF2 · assets/webfonts
d27bc752105c079f…
146.9 KB
JS · view/block/build
29c7847b024e22ea…
124.9 KB
PHP · admin/csf/fields/typography
3a62c819d3ef1780…
120.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.