Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · documentation/assets/images
…
2.10 MB
PNG · documentation/assets/images
682bba9c20df18b2…
1.82 MB
PNG · documentation/assets/images
7ed0eba980516a13…
1.28 MB
ZIP · WordPress Themes
77e9e741ca522c46…
1.23 MB
PNG · documentation/assets/images
570fb1bb7dfee1bc…
970.4 KB
PNG · documentation/assets/images
bcec9cbcb598838d…
963.4 KB
PNG · documentation/assets/images
f98b3a444dadb987…
848.3 KB
PNG · documentation/assets/images
df0baf318a695835…
838.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.