Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · source/bundle
0998fef5143af190…
1.13 MB
JS · source/elementor/widget/video-list
4d95361e0eaa4108…
1.12 MB
JS · source/elementor/widget/playlist-list
1fcbb3579caa6f83…
1.11 MB
JS · package root
6dc13e3cae8fd8c4…
157.7 KB
JS · elementor/widget/video-list
30b7ad871fcad6f0…
148.4 KB
JS · elementor/widget/playlist-list
ea914bb6492a3536…
143.6 KB
JS · vendor
733f585573cedfe2…
137.3 KB
CSS · vendor
ce9a68a6ce52b1a7…
15.5 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.