Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · package root
…
10.47 MB
PNG · assets/images
cb0058d60491cb62…
1.66 MB
PNG · assets/images
4e079a4852245129…
1.62 MB
PNG · assets/images
b14da96df9576217…
1.08 MB
PNG · assets/images
faa7549182adeecd…
1.03 MB
DB · assets/images
10bef9fb3019d556…
1011.0 KB
PNG · assets/images
8eb9d21b3b6d0a12…
950.4 KB
PNG · assets/images
9dc18f075d2268d0…
731.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.