Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · package root
…
78.78 MB
CSS · main files placeholder/comercio/assets/css
28819756aaafa6e0…
571.0 KB
SVG · main files placeholder/comercio/dependencies/fontawesome/webfonts
981c7b389bbd9de1…
495.6 KB
SVG · main files placeholder/comercio/dependencies/fontawesome/webfonts
b0f3ece320e40f6c…
369.4 KB
JS · documentation/assets/js
0a6c4c4db171663b…
242.0 KB
JPG · documentation/assets/images
a7f64c240cb17010…
185.0 KB
CSS · main files placeholder/comercio/dependencies/bootstrap/css
ddbc2ad3b3f02d02…
141.4 KB
SVG · main files placeholder/comercio/dependencies/fontawesome/webfonts
42e44be1cfd7bfab…
104.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.