Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · package root
…
5.78 MB
PNG · assets
222c3b8c50ffc723…
217.9 KB
HTML · package root
177f11784ef75da3…
116.4 KB
SVG · assets
d5839d1fd7cdeb44…
115.1 KB
SVG · assets
5dfa3df335ae03bf…
114.3 KB
SVG · assets
62f57acc88aa9cb2…
113.1 KB
CSS · assets
e9503448692b738d…
97.6 KB
JS · assets
b294e973896f8f87…
94.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
16 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.