Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · docs/assets/images
cb2b42eb08e048bd…
1.47 MB
JPG · docs/assets/images
499359dd2d4c811a…
1.24 MB
JPG · Festiva/assets/dummy
6ca66c629ea781cb…
889.1 KB
CSS · docs/assets/css
3e7e95cc6fa8bbe3…
344.9 KB
JPG · Festiva/assets/dummy/event
b3adac6ba496fdf2…
271.5 KB
JPG · Festiva/assets/dummy/event
5c9336fd270e47d6…
256.4 KB
JPG · Festiva/assets/dummy/event
439713910d20024d…
193.9 KB
JPG · Festiva/assets/dummy/event
f4ae6094ec12b396…
179.5 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.