Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
WEBM · realdoc
…
81.50 MB
PSD · assets/cube/img
…
5.43 MB
PNG · realdoc/assets/images
6a4e153b8c31eae7…
1.39 MB
PNG · realdoc/assets/images
e0b1165ac15d1793…
1.33 MB
ZIP · assets
ab5aa3900a3b8b0a…
1.18 MB
SVG · admin/files/webfonts
96b9988db47361f8…
881.2 KB
XML · realdoc/assets
46e38589d1d11254…
812.5 KB
JPG · assets/images
2cc57eaa12365b15…
741.8 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request4
new Function()
Builds a function from a string
Code execution2
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.