Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · assets/images/home-1
cb8f86fc7d6be451…
1.06 MB
CSS · assets/css
87d82efdf0fda046…
454.7 KB
PNG · assets/images/home-2
76c805ddf2aefbdb…
396.0 KB
WOFF2 · assets/fonts
d9c0c73c3e6a75d5…
382.9 KB
WOFF2 · assets/fonts/fonts
d9c0c73c3e6a75d5…
382.9 KB
PNG · assets/images/inner
20936b3424af88c6…
356.3 KB
PNG · assets/images/inner
2c990c0b00516d5a…
354.8 KB
WOFF2 · assets/fonts
d2d786476ddb1827…
349.3 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.