Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
FILE · html/img/slider
…
2.21 MB
JPG · html/img/bg
7fb9464964aa0e96…
842.0 KB
FILE · html/img/bg
d503b4259a1743e4…
733.7 KB
FILE · html/img/bg
a7c2d783070ccefc…
646.9 KB
HTML · documentation
a385d7ed668dce9f…
563.5 KB
TTF · documentation/assets
97af2f6b51199150…
486.5 KB
TTF · html/fonts
97af2f6b51199150…
486.5 KB
FILE · html/img/portfolio
c29982f8e493a06c…
480.4 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution2
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.