Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · source-files
…
17.75 MB
SVG · tentered-template/css/fonts
b751f81b4b0db77c…
197.4 KB
JS · tentered-template/plugins/rs-plugin/videojs
935aa518fce60345…
195.8 KB
JS · tentered-template/plugins/rs-plugin/js
0f0749361c3e3759…
156.4 KB
JS · tentered-template/js
a7b2d15f48f03e43…
141.1 KB
JPG · tentered-template/images/patterns
bf37a4cbaf3fafa8…
117.9 KB
CSS · tentered-template/css
0693806522e9dbb8…
108.9 KB
JS · documentation/js
4a62927a380e201c…
89.5 KB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution4
new Function()
Builds a function from a string
Code execution1
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.