Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · img/flags
cd200f4bfb366de2…
455.8 KB
TTF · fonts/awesome
1782156bfa2054db…
296.4 KB
SVG · img/flags
9418b2322bb0fb76…
185.5 KB
SVG · img/flags
07326e87ccc18677…
183.7 KB
SVG · img/flags
57d6a22913ae8a3a…
157.8 KB
SVG · img/flags
c4407502f6b05dbe…
141.8 KB
SVG · img/flags
cd0c1acd571abd17…
126.7 KB
WOFF2 · fonts/awesome
1b099f88c06ed086…
123.9 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.