Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · includes/modules/vue-ui/assets/js
b9f18495bdd39ceb…
333.5 KB
JS · includes/modules/vue-ui/assets/js
72194d152571dd37…
91.5 KB
JS · includes/modules/vue-ui/assets/js
0ff4096c7cfa4f1e…
74.9 KB
PO · languages
18f4589fd7eff8ba…
71.4 KB
PHP · includes/addons
e95ad5d3b0b37fe4…
71.2 KB
CSS · includes/modules/jet-dashboard/assets/css
592a9a44f912349b…
64.6 KB
CSS · includes/modules/jet-dashboard/assets/css
a0da0e4b8e48ac9f…
64.5 KB
JS · assets/js
993173fed6a138e7…
59.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution5
Referenced hosts
13 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.