Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MUSE · package root
…
19.81 MB
PDF · package root
eb8aad95f504ddbf…
840.8 KB
JPG · images
d3dca983caaa2e13…
362.2 KB
PNG · images
ca56095217b0bf21…
306.4 KB
JPG · images
a153bfa456c91631…
297.3 KB
PNG · images
2c05b1b208f582d0…
295.4 KB
HTML · package root
68b35d09623c8617…
295.0 KB
JPG · package root
f83161f2f19604e0…
292.7 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
16 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.