Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MUSE · package root
…
43.91 MB
PNG · images
3f8b74a969b54d03…
486.2 KB
PNG · images
0fcb1f0e0773fdad…
295.0 KB
PNG · images
238af90715700060…
261.8 KB
PNG · images
e828136f337a5306…
247.2 KB
PNG · images
42d3657c32c45806…
194.5 KB
JPG · package root
ff7f4168949d781d…
171.0 KB
JPG · images
ff7f4168949d781d…
171.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
17 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.