Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MP4 · Kaniz/assets/videos
…
4.25 MB
WEBM · Kaniz/assets/videos
…
4.25 MB
MAP · Kaniz/assets/bootstrap/css
d2e53a4ae6f7f577…
643.0 KB
MAP · Kaniz/assets/bootstrap/css
0fc3af61846fde23…
642.9 KB
MAP · Kaniz/assets/bootstrap/css
ab82a7e9958db4c2…
555.1 KB
MAP · Kaniz/assets/bootstrap/css
4c25ce2132705ff6…
554.6 KB
MAP · Kaniz/assets/bootstrap/js
18dad1fedd95fe1c…
438.4 KB
SVG · Kaniz/assets/fonts
ad6157926c1622ba…
434.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution3
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.