Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · freemius/includes
6298056a8b8f93df…
967.1 KB
TTF · assets/webfonts
23c4f99ee9074111…
416.1 KB
JSON · inc/kirki/modules/webfonts
e8508de2ef5d28e9…
346.3 KB
JS · freemius/assets/js/pricing
7cc6edd2972a3852…
291.7 KB
SVG · assets/img
92737676018c5e74…
247.8 KB
JS · assets/js
74d51194391c1557…
236.3 KB
TTF · assets/webfonts
276af0307107fc3e…
205.8 KB
EOT · assets/webfonts
9f0334c395c4b7a6…
182.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.