Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PSD · package root
…
79.54 MB
JPG · PT/assets/video
ed521d1edfc72ef0…
1.05 MB
PDF · package root
f2059df380f876a9…
609.8 KB
ICO · PT
c629b236c1df17e5…
391.4 KB
PNG · PT/images
3b0e6e81b484f969…
246.3 KB
PNG · PT/images
9129bea320460269…
245.0 KB
JS · PT/rs-plugin/videojs
79603807efd3c9b7…
243.7 KB
JPG · PT/assets/full-slides
11bf2bfcb4403828…
216.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution3
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.