Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MAP · vendor/dropzone
bdf1bd180998e40c…
175.2 KB
JS · vendor/dropzone
7995293bb548c28f…
135.6 KB
JS · vendor/dropzone
fa6ce42eebbf5be2…
135.2 KB
JS · vendor/select2
803612c6f9f5a644…
77.4 KB
JS · vendor/dropzone/min
386ff5d37c1787a5…
47.0 KB
JS · vendor/dropzone/min
fa88ab5ddbe0b4bb…
46.1 KB
PO · package root
aba4f591d5efde5c…
24.0 KB
POT · package root
f2bd499b743a16e4…
24.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation4
Referenced hosts
14 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.