Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CSS · media/css
d31bef450ee67b64…
114.4 KB
ZIP · package root
cfe788213133da4f…
111.6 KB
JPG · media/img
f9dac82f4cad436d…
71.5 KB
PNG · media/img
c7e8e7b441c6971e…
47.5 KB
JPG · media/img
abf3f69f63da7409…
25.0 KB
PNG · media/img
c37e2b6c80c72de4…
19.0 KB
JS · media/js
584a26f39cef2db2…
15.8 KB
TXT · Licensing
21b9245c8674f673…
14.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
7 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.