Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · Brookwood Documentation/jquery
b41671d06f3004d6…
501.0 KB
TTF · Brookwood - Furniture eCommerce PWA Mobile HTML Template/assets/webfonts
6d53c706f3b7178c…
388.4 KB
PNG · Brookwood - Furniture eCommerce PWA Mobile HTML Template/assets/images/splashscreen
e397a1c30bfa1e72…
373.8 KB
PNG · Brookwood - Furniture eCommerce PWA Mobile HTML Template/assets/images/Onboarding-Screen-1
4ae6587a0db389b1…
345.4 KB
PNG · Brookwood - Furniture eCommerce PWA Mobile HTML Template/assets/images/Onboarding-Screen-1
09302fb9d131ae5b…
338.3 KB
CSS · Brookwood Documentation
f5fcbf99142f93fd…
283.1 KB
PNG · Brookwood - Furniture eCommerce PWA Mobile HTML Template/assets/images/Onboarding-Screen-1
00400211e5d60e2a…
273.3 KB
JS · Brookwood - Furniture eCommerce PWA Mobile HTML Template/assets/js
2de961a2cda6e01a…
247.0 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution7
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.