Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
GIF · intro/image-intro
…
4.83 MB
JS · plugin/js
0ac6a6c063827265…
630.4 KB
JPG · intro/image-intro
3b31a48d0d271f2a…
618.2 KB
MP3 · intro/soundintro
33e60bbf9d12bb57…
612.9 KB
JS · plugin
91a85781bda5d2c4…
572.8 KB
MAP · plugin/css
8babb658756c3500…
549.2 KB
JPG · assets/images
289130b15cf453a1…
519.1 KB
JPG · assets/images/blog
5117ab4aafc4df92…
459.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution3
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.