Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · remos/js/apexcharts
6d1e0eab0365ec3c…
510.1 KB
JSON · remos/icon
7f36611bed29da3f…
390.8 KB
JS · remos/js/tinymce
ce4d5ce2bcc83bca…
373.8 KB
SVG · remos/icon/fonts
83a1360a74a67b8e…
337.1 KB
JS · remos/js
67a455b3099f891d…
243.3 KB
HTML · remos/icon
692c0fee61831863…
223.0 KB
JPG · remos/images/bg-menu
3dca3973c7735d12…
177.6 KB
HTML · remos
5952e036f6a40ce3…
157.2 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution10
atob
Decodes base64 in the browser
Obfuscation4
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.