Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · Themes
1af30f2934aea3b0…
1.35 MB
ZIP · Themes
3348b557e4b20f40…
1.34 MB
ZIP · Themes
3cba9c975e9a1aeb…
1.33 MB
ZIP · Themes
8de5e5f12c4b6378…
1.33 MB
GIF · Guide/userguide/images/content
16eebee3e83617dc…
1.25 MB
ZIP · Themes
c9089dcbcb1fd8c1…
1.20 MB
PNG · Guide/userguide/images/content
eec7227cddcd14ea…
891.7 KB
PNG · Guide/userguide/images/content
5cb50d76adaaf57f…
770.9 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.