Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · Mitro-HTML-Template/images
c1c487307bf1c5ad…
558.9 KB
JPG · documentation/assets/images
9b9a4f12e46239bf…
292.7 KB
PNG · Mitro-HTML-Template/images
5ef74f6d0d07b7d1…
236.1 KB
SVG · Mitro-HTML-Template/css/fonts
b751f81b4b0db77c…
197.4 KB
SVG · Mitro-HTML-Template/css/fonts
b751f81b4b0db77c…
197.4 KB
JPG · Mitro-HTML-Template/images
5f0701f6d80bb999…
132.4 KB
JPG · Mitro-HTML-Template/assets
72f0c518059e7fbc…
125.4 KB
JPG · documentation/assets/images
5f22d6f8837c37e0…
119.9 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution2
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.