Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MUSE · package root
…
21.94 MB
MUSE · package root
…
20.72 MB
PDF · package root
…
2.44 MB
CSS · Responsive version/css
4f03e65d9761983e…
314.7 KB
HTML · Responsive version
7a612a9474fa2798…
291.0 KB
JPG · package root
71f282f2e10768fc…
259.3 KB
JPG · package root
5e085f1eb79456d0…
252.4 KB
JPG · Adaptive version/images
5e085f1eb79456d0…
252.4 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution2
eval (JavaScript)
Executes a string as code
Code execution2
Referenced hosts
17 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.