Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · html/assets/fonts
4da18191698677d8…
905.6 KB
SVG · html/assets/fonts
0ce0cc403ccd09a2…
901.5 KB
TTF · html/assets/fonts/font-awesome
e4f6a7e9d1a7c0b4…
388.1 KB
PNG · html/assets/img
9fd6582d4e257985…
238.1 KB
EOT · html/assets/fonts
8a57f8a90a863c73…
221.0 KB
TTF · html/assets/fonts
07ce355990b27cd0…
220.8 KB
SVG · html/assets/fonts
e7e31d919d9f3f57…
190.9 KB
CSS · html/assets/css
b1c76350fc008620…
190.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution3
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.