Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · Template/assets/images/shapes
…
8.10 MB
SVG · Template/assets/images/shapes
…
4.49 MB
SVG · Template/assets/images/shapes
…
4.49 MB
SVG · Template/assets/images/shapes
…
4.49 MB
TTF · Template/assets/fonts
ef0c125163e15b48…
1.21 MB
TTF · Template/assets/fonts
709d015ec16d7ce5…
1.21 MB
TTF · Template/assets/fonts
d4eb15d2b72cec84…
1.10 MB
TTF · Template/assets/fonts
6d814a4a1c1c50a1…
1013.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.