Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · zoyot/javascript
5bbb03cf84ad21d1…
140.3 KB
JPG · zoyot/images/page-title
fe5910fe2c2d7cae…
133.1 KB
JPG · zoyot/images/video
6088dbd5586c441c…
121.0 KB
JPG · zoyot/images/video
796ea5a071e2d4f2…
121.0 KB
CSS · zoyot/stylesheets
47eface63bf18ecb…
118.6 KB
JPG · zoyot/images/page-title
6088bfdde3fc48b1…
115.0 KB
JPG · zoyot/images/page-title
0e7e0905ec7af181…
115.0 KB
JS · documentation/javascript
f554d2f09272c6f7…
91.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.