Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · assets/img
99709b4b4822f0e9…
599.8 KB
SVG · assets/img
0dd50b525048b5c6…
118.6 KB
SVG · assets/img
e9cbc7c81a6a0f6f…
83.3 KB
SVG · assets/img
925d0190844f1552…
51.2 KB
SVG · assets/img
80600e3db6849763…
44.7 KB
SVG · assets/img
179f541e2146f142…
28.6 KB
SVG · assets/img
2aded0ec93056f85…
22.4 KB
PHP · widgets
95eeef3542e719bd…
22.4 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
2 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.