Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MUSE · package root
…
33.38 MB
JS · Flatstore HTML demo/scripts
61c6caebd2392174…
91.4 KB
CSS · Flatstore HTML demo/css
7090d870e75ce91b…
51.4 KB
CSS · Flatstore HTML demo/tablet/css
4921235d6ff47e4b…
51.2 KB
CSS · Flatstore HTML demo/phone/css
d38a583a5f9570f8…
50.5 KB
JS · Flatstore HTML demo/scripts
38aad227be5de3d3…
50.1 KB
HTML · Flatstore HTML demo
58ffc38071dee006…
46.5 KB
HTML · Flatstore HTML demo/phone
62d69cbaf4d84dba…
45.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.