Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPG · public/assets/img/bg
f1f26da2d1e7bac2…
454.9 KB
CSS · src/app/assets
6fac7e0a9336a242…
324.7 KB
CSS · assets/css
37ecffa0ebb8a142…
228.4 KB
JPG · public/assets/img/demo
2fb9b5702b956612…
197.4 KB
JPG · public/assets/img/demo
f9d9d91e2d42b80c…
189.6 KB
JPG · public/assets/img/demo
8c142bce24556f2c…
186.7 KB
JS · assets/js
563c556f33a764c1…
183.0 KB
JSON · package root
c28eccc69e78d6b6…
179.2 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.