Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · assets/images
7e446ae2214f7ff5…
291.2 KB
PNG · assets/images
39d969ad64572060…
274.3 KB
PNG · assets/images
2144fb9009d1b973…
68.0 KB
PNG · assets/images
e9040ad1aeb43aec…
66.4 KB
PNG · assets/images
8d08d618ec5080c0…
41.6 KB
TXT · package root
3604493d21f791fc…
26.4 KB
PNG · assets/images
eb683b409909be8d…
22.3 KB
PNG · assets/images
2f277fde1da8eff6…
20.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.