Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TTF · Vmenu-HTML/fonts
83fbb88e975f6711…
706.4 KB
TTF · Vmenu-HTML/fonts
ecbca8e6f23cd001…
686.1 KB
TTF · Vmenu-HTML/fonts
8d19f13280aff028…
673.8 KB
WOFF · Vmenu-HTML/fonts
d89a52e7dcd7659e…
335.1 KB
WOFF · Vmenu-HTML/fonts
a6343e14736fd40c…
318.5 KB
WOFF · Vmenu-HTML/fonts
dd8380bbf4e868a8…
316.3 KB
SVG · Vmenu-HTML/fonts
bfdef833219a6edf…
306.1 KB
JPG · Vmenu-HTML/img
f2966664ccd2b559…
303.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.