Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MP4 · hompark/videos
…
3.14 MB
PNG · hompark/ico
f9292c5731300a3b…
989.1 KB
PNG · hompark/ico
bd52a3e9ab8f6b58…
988.1 KB
PNG · hompark/ico
aefb45f16d30e87a…
986.6 KB
PNG · hompark/ico
de88c940e105ec34…
986.1 KB
PNG · hompark/ico
5b953da1b8c9418c…
985.6 KB
SVG · hompark/fonts
3e564467338fb1db…
797.7 KB
SVG · hompark/fonts
3f73a3d20bf0a303…
675.6 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
shell_exec
Runs an operating-system command
System command2
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.