Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · documentation/images
100f82f74c7aa531…
1.74 MB
PNG · documentation/images
0817ea99403339b5…
498.4 KB
TTF · charifund/assets/fonts/webfonts
31f099c13f6e4ba0…
413.7 KB
TTF · charifund-box/assets/fonts/webfonts
31f099c13f6e4ba0…
413.7 KB
TTF · charifund-dark/assets/fonts/webfonts
31f099c13f6e4ba0…
413.7 KB
TTF · charifund-rtl/assets/fonts/webfonts
31f099c13f6e4ba0…
413.7 KB
PNG · charifund/assets/images
772fc3f6265dfc85…
337.4 KB
PNG · charifund-box/assets/images
772fc3f6265dfc85…
337.4 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.