Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPG · assets/img
26e3fe882f1bdea6…
925.3 KB
JPEG · assets/img
b37a970e4a9afc59…
842.8 KB
JPG · assets/img
8e573fd1c0f3aac9…
597.7 KB
JPG · assets/img_TF
8e573fd1c0f3aac9…
597.7 KB
JPG · assets/img
0878a8272c804780…
518.0 KB
JPG · assets/img
69ef3c6957876a35…
416.5 KB
TTF · assets/fonts
fbbf06d7437aa30f…
409.9 KB
JPG · assets/img
bf6def11e7f9afa6…
407.4 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.