Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · bonsa/assets/fonts
eaa696a45f0f0fa4…
1.14 MB
SVG · bonsa-rtl/assets/fonts
eaa696a45f0f0fa4…
1.14 MB
JPG · documentation/images
6dfeccb689eadbe8…
612.7 KB
EOT · bonsa/assets/fonts
e6c956eb2d034c0c…
380.5 KB
EOT · bonsa-rtl/assets/fonts
e6c956eb2d034c0c…
380.5 KB
JPG · documentation/images
3fd0bd3d7866b6ae…
373.5 KB
SVG · documentation/fonts
465bf89cbd83d648…
348.3 KB
WOFF · bonsa/assets/fonts
5ba91d51ddec8662…
301.5 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.