Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · package root
6f2f8c5b9161f960…
1.49 MB
ZIP · package root
c25d954d5a8727ad…
1.49 MB
ZIP · package root
fc585e2b2150459c…
1.49 MB
ZIP · package root
215dfcf866254c1e…
1.49 MB
ZIP · package root
e08847fd73d866dc…
1.49 MB
ZIP · package root
5dfdddc19997a4bb…
288.9 KB
ZIP · package root
dde62a22c805dda1…
288.2 KB
ZIP · package root
0e56a596cea8b848…
288.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.