Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · HTML/dist/assets/libs/tailwindcss/peers
…
4.02 MB
PNG · HTML/src/assets/images
96396e4fab28f8d2…
1.12 MB
PNG · HTML/src/assets/images
50550466e83e6d6f…
1.02 MB
PNG · HTML/dist/assets/images
1116cf52be3449af…
967.3 KB
PNG · HTML/dist/assets/images
018ffb1ecc56c57e…
923.8 KB
PNG · HTML/src/assets/images
d031adf57a333109…
865.4 KB
PNG · HTML/dist/assets/images
cb1d76d662b0e40e…
762.2 KB
PNG · HTML/src/assets/images
42ddbcab8ed9d0dd…
431.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation4
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.