Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · assets/images
1751501068df1a96…
1.94 MB
PNG · assets/images
1c97a645221d92a3…
1.03 MB
HTML · package root
fe3cbb1dc93b6752…
744.4 KB
PNG · assets/images
e1480b4ed7adcfad…
683.4 KB
PNG · assets/images
509a58cd3adf4be5…
599.4 KB
PNG · assets/images
c0cedd8762fe2067…
569.8 KB
PNG · assets/images
77231539d04a4cff…
479.3 KB
PNG · assets/images
cbd8fea6213f0106…
459.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.