Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
UNBOUNCE · package root
5b2155e365d6946c…
960.0 KB
PNG · assets/images
c30cc05ad9e3a6d3…
406.9 KB
JPG · package root
c7d853ddc620a896…
179.2 KB
PNG · package root
a0ad2ce30ba36cb5…
134.2 KB
PNG · package root
24865be7b902e10d…
131.2 KB
DB · package root
7604bc129b0871f9…
112.5 KB
DB · clients
0521e4a7ef57ee8b…
104.0 KB
PNG · package root
140b4ed175b3cc41…
93.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution3
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.