Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MUSE · muse
…
48.91 MB
SVG · html/ngoo/fonts
8e3586389bb4cd01…
382.4 KB
PDF · package root
7e79bf91d4cc9108…
282.7 KB
HTML · html/ngoo
e91a650b17c7942d…
188.1 KB
HTML · html/ngoo
9821463a70f46cca…
159.0 KB
CSS · html/ngoo/css
f95b61faa4185b91…
148.7 KB
CSS · html/ngoo/css
8817bfc626eb8016…
147.1 KB
HTML · html/ngoo
9849c407eef85227…
144.2 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
11 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.