Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
271ca0d28daa9c78…
80.1 KB
PNG · packages/blackemo
4c45fe4bd3a2ad42…
49.5 KB
PNG · packages/blackemo
903f19f5a4efbe1a…
42.0 KB
PNG · packages/blackemo
de821123ac232cb2…
41.9 KB
PNG · packages/blackemo
dd03a85ae8d648d7…
40.7 KB
PNG · packages/blackemo
bcbc3064cf7d361e…
40.7 KB
PNG · packages/blackemo
fb6c4f68693c2e35…
40.5 KB
PNG · packages/blackemo
936bcfeafb5c3fd8…
39.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
str_rot13
Trivial string obfuscation
Obfuscation1
Referenced hosts
7 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.