Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · 01-html-file/js
97bca2a8204372f2…
526.8 KB
SVG · 01-html-file/fonts
d67041fe5d50eef9…
357.0 KB
DB · 01-html-file/images/case
15c435106f701928…
331.0 KB
JS · 01-html-file/js
430f36f9b5f21aae…
286.6 KB
JPG · 02-documentation-file/images
d5e3aa6bae3caa25…
258.9 KB
CSS · 01-html-file/css
2cf500e3ba771c07…
202.3 KB
DB · 01-html-file/images/blog
ef3144e82e2afd32…
189.5 KB
DB · 01-html-file/images/pattern
409e317b337eab77…
180.5 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation3
shell_exec
Runs an operating-system command
System command2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.