Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · assets/images
b93a07655ac80a8a…
1.30 MB
PNG · assets/images
f725e7e7bd47fb4d…
563.0 KB
PNG · assets/images
3aaf0ba1ef5e794a…
489.7 KB
PNG · assets/images
5349ef6797102c10…
480.1 KB
JSON · lottie
bd53ae72b92c6173…
379.4 KB
PNG · assets/images
369041c241f84feb…
338.7 KB
PNG · assets/images
70e804c434bb1c50…
310.9 KB
HTML · package root
2f877185513d398d…
273.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution4
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.