Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CSS · assets/css
c2fcb7968ad8b5f2…
499.5 KB
SVG · assets/css/icons
d06d765411f24028…
471.1 KB
TTF · assets/css/fontawesome/webfonts
1782156bfa2054db…
296.4 KB
PNG · package root
e8515bd397fe5d32…
220.2 KB
CSS · assets/css
4c8abfe4a459253b…
200.6 KB
TTF · assets/css/fontawesome/webfonts
9e122861bc5f7d61…
175.9 KB
JPG · assets/images
49c3c1cae5fe36c4…
134.5 KB
JS · assets/js/swiper
81c92787425c02ac…
132.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.