Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MUSE · package root
…
11.47 MB
MUSE · package root
…
10.88 MB
MUSE · package root
…
9.84 MB
CSS · css
17c4b42b1997a383…
215.3 KB
HTML · package root
c0924842f2040c09…
171.4 KB
JS · scripts
ba6eda7945ab8d7e…
91.4 KB
JPG · package root
49967b0672417e8b…
73.0 KB
JS · scripts
276dc2453da181ce…
49.5 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
12 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.