Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MUSE · package root
…
15.19 MB
EPS · HTML demo/assets
d336a3fc12f692eb…
964.1 KB
PNG · HTML demo/images
f7da9158d1d86eca…
961.9 KB
PNG · HTML demo/images
22fa40ccce350643…
936.1 KB
PNG · HTML demo/images
e536a5530c8fe1ca…
859.3 KB
PNG · HTML demo/images
3a551d7b493abe2d…
856.0 KB
PNG · HTML demo/images
ae714a680863ef1b…
829.1 KB
PNG · HTML demo/images
c907e816800cf6ee…
769.7 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
18 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.