Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TTF · Template/assets/fonts
ef0c125163e15b48…
1.21 MB
TTF · Template/assets/fonts
709d015ec16d7ce5…
1.21 MB
TTF · Template/assets/fonts
d4eb15d2b72cec84…
1.10 MB
TTF · Template/assets/fonts
6d814a4a1c1c50a1…
1013.7 KB
TTF · Template/assets/fonts
85a820821f87aeb5…
886.4 KB
TTF · Template/assets/fonts
50039bebe746a962…
875.9 KB
TTF · Template/assets/fonts
a49b3fc5cd8468e7…
776.4 KB
PNG · Documentation/assets/img
18f86da1d42e7cd3…
738.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.