Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · dist/assets/fontawesome/webfonts
6090f7e91e99ecdd…
614.5 KB
SVG · dist/assets/fontawesome/webfonts
7911424ad79931f4…
610.1 KB
JS · dist
60df4e47b269369c…
418.2 KB
EOT · dist/assets/fontawesome/webfonts
263c75a8cab8bdd6…
164.4 KB
TTF · dist/assets/fontawesome/webfonts
52f6d77a005727f4…
164.2 KB
SVG · dist/assets/fontawesome/webfonts
bfa69f83d4a513bb…
138.1 KB
EOT · dist/assets/fontawesome/webfonts
914a7ba14b7d4eb4…
113.8 KB
TTF · dist/assets/fontawesome/webfonts
365163b706c8cef5…
113.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
8 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.