Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · editor
36195aed18497045…
662.3 KB
JS · editor
8ab16f0f762b7873…
588.1 KB
PNG · designs/images
01c35765e214dbe5…
337.3 KB
PNG · designs/images
ffd79e1f5cebfde0…
232.8 KB
PNG · designs/images
4f50d3777b563e63…
216.4 KB
JS · editor
ab899e699f39fcdd…
147.7 KB
PNG · designs/images
9cfcf7f7f1330140…
109.0 KB
PHP · package root
b3842033e441ccaf…
46.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
6 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.