Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · HTML_TEMPLATE/font/rtmicon
19515a2a17179351…
1.47 MB
JPG · DOCUMENTATION/assets/images
d22058e453559ab5…
1.01 MB
TTF · HTML_TEMPLATE/font
67a65763c7f80903…
385.4 KB
EOT · HTML_TEMPLATE/font/rtmicon
d9b0125161b46ed6…
359.5 KB
WOFF · HTML_TEMPLATE/font/rtmicon
e91b6fd8d4544795…
359.4 KB
TTF · HTML_TEMPLATE/font/rtmicon
7983a931cea88250…
359.3 KB
JS · DOCUMENTATION/assets/js
78a85aca2f0b110c…
278.6 KB
JS · HTML_TEMPLATE/js/vendor
265a924c42de4784…
278.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.