Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPG · Bolo HTML/images/portfolio/pf-slider-big
be750e3c0d56bbfa…
855.2 KB
JPG · Bolo HTML/images/portfolio/pf-slider-big
1f2182200e78a999…
720.0 KB
JPG · Bolo HTML/images/background
2783f9023604104d…
647.9 KB
MAP · Bolo HTML/css
d254b6e899e4e38c…
631.3 KB
JPG · Bolo HTML/images/background
6f67ffe1adf11afd…
627.2 KB
JPG · Bolo HTML/images/slider
a8e93ffa4cf6ba23…
612.5 KB
JPG · Bolo HTML/images/slider
a3c1975ad24ef451…
526.0 KB
JPG · Bolo HTML/images/slider
814645d90b3d0959…
515.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution7
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.