Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MP4 · HTML/images/slider/videos
…
2.16 MB
DLL · HTML/fonts/icomoon/fonts
c5b970e7fe86c2f3…
1.24 MB
JPG · HTML/images/textures
be4f603e58c189ac…
581.5 KB
JPG · HTML/images/textures
3549b08b3e0fc0ec…
580.0 KB
MAP · HTML/css/bootstrap
42a1805ce7839781…
380.1 KB
JS · HTML/revolution/js/source
49354c649499ef38…
371.4 KB
EOT · HTML/fonts/icomoon/fonts
3d24da84458a56a1…
361.9 KB
WOFF · HTML/fonts/icomoon/fonts
d8a7913b8b0e42ed…
361.8 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution3
eval (JavaScript)
Executes a string as code
Code execution2
file_get_contents(url)
Fetches a remote URL
Remote request1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.