Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · orix/img
7988b2a553a93d65…
381.2 KB
PNG · orix/img
0dab96c9e19eac65…
343.0 KB
SVG · orix/fonts
51c5b7fbb6ad58d6…
233.4 KB
JPG · Documentation/images
a0eaa69e19f26ed2…
217.1 KB
PNG · orix/img
863f9ea56e966699…
184.6 KB
PNG · orix/img
82dc9c62854f80c4…
179.4 KB
PDF · orix/pdf
3ad10f7b21efb7d2…
176.0 KB
JPG · Documentation/images
f0f13d053f65539d…
104.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.