Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JSON · html/fontawesome/metadata
…
12.41 MB
SVG · html/fontawesome/webfonts
…
2.12 MB
SVG · html/fontawesome/webfonts
9bdfa5883ccab7fb…
1.97 MB
SVG · html/fontawesome/webfonts
69d6e70d98bc5b46…
1.77 MB
SVG · html/fontawesome/webfonts
89c3e6b0d78c9cba…
1.44 MB
SVG · html/fontawesome/webfonts
7e98c48405d641de…
675.5 KB
SVG · html/fonts
981c7b389bbd9de1…
495.6 KB
YML · html/fontawesome/metadata
ffdb7d88287bf827…
486.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.