Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MUSE · Muse
…
42.62 MB
SVG · Html/trainer/fonts
ad6157926c1622ba…
434.0 KB
PDF · package root
cff2db50a827deda…
283.9 KB
CSS · Html/trainer/css
cd6e0adf0bc9a528…
219.3 KB
CSS · Html/trainer/css
78b445bbf97c70a4…
194.3 KB
HTML · Html/trainer
b605e588739e4166…
192.9 KB
CSS · Html/trainer/css
c6af90259b6abb7f…
175.9 KB
HTML · Html/trainer
6f6aff77503e0d6c…
174.6 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
13 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.