Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
DB · Vcard2-HTML/images
1a2d598bea4b6d91…
527.0 KB
MAP · Vcard2-HTML/css
5909107b92bd7cfe…
381.4 KB
SVG · Vcard2-HTML/fonts
7414288c272f6cc1…
347.6 KB
JPG · Vcard2-HTML/images
11f9e21c0f7680b3…
136.1 KB
TTF · Vcard2-HTML/fonts
1b7f3de49d68b01f…
135.0 KB
CSS · Vcard2-HTML/css
31fbd99641c212a6…
119.7 KB
SVG · Vcard2-HTML/fonts
42f60659d265c1a3…
106.2 KB
OTF · Vcard2-HTML/fonts
7961070f76a33c13…
103.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.