Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · assets/images
2c696b3bc5538dc1…
1.92 MB
JSON · package root
52d4bd192d102224…
906.9 KB
TTF · public/assets/fonts
5eb0df3449b8f788…
549.5 KB
TTF · public/assets/fonts
b5f9cd44c2ad5def…
477.5 KB
TTF · public/assets/fonts
0d2ab10110edd1e3…
439.4 KB
TTF · public/assets/fonts
79fc8a96e647e265…
374.8 KB
SVG · assets/fonts
e6eaeca499952bdd…
272.6 KB
PNG · public/assets/img/bg
572e454f522ac7b4…
258.5 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.