Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MUSE · package root
…
37.91 MB
AI · HTML demo/assets
9311f0b0b1e667b2…
318.8 KB
CSS · HTML demo/css
1265ec587f497704…
112.7 KB
CSS · HTML demo/tablet/css
392a6c5e82c665bd…
109.3 KB
CSS · HTML demo/phone/css
12124ce1909e9b23…
105.0 KB
PNG · img
4f2c78cde0ef6d6d…
103.4 KB
JS · HTML demo/scripts
aa4b78f6e3597ddd…
91.9 KB
HTML · HTML demo
6276ca7cd0a702ec…
75.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.