Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · HTML/dist/assets/libs/tailwindcss/peers
…
4.02 MB
PNG · HTML/src/assets/images/demo
9749356c71e1a2b9…
1.01 MB
PNG · HTML/src/assets/images/demo
ba41bfc78a275f33…
1008.4 KB
PNG · HTML/dist/assets/images/demo
5ef0e1a181f3e6f4…
900.9 KB
PNG · HTML/dist/assets/images/demo
201f66bab9dfeefd…
846.4 KB
PNG · HTML/dist/assets/images/demo
165311c91fb32d2b…
481.2 KB
PNG · HTML/src/assets/images/demo
e18981f150487d14…
384.6 KB
PNG · HTML/src/assets/images
b7b8b9f31dcf5298…
375.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation4
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.