Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/highlight
755eee5330c3c01f…
669.1 KB
JS · assets/highlight
77cfb692ad6b2b7e…
200.5 KB
JS · assets/highlight
cd7a0b1b11e7478d…
47.8 KB
PHP · options
9aa69fe2604e4e94…
19.7 KB
PNG · assets/highlight/styles
68003b5dbe5c47c0…
17.8 KB
PHP · includes
45d36f4aabceba51…
15.3 KB
FILE · package root
94fe8acb2fca8e5a…
10.5 KB
PHP · options
a310f5412b42195a…
7.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
str_rot13
Trivial string obfuscation
Obfuscation1
Referenced hosts
16 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.