Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PSD · package root
…
18.91 MB
PDF · package root
27202cb361f490a2…
835.0 KB
PDF · v2.0.2/fonts
5d7756086e1f278d…
754.9 KB
SVG · v2.0.2/fonts
f0cfc3d736a4db6b…
264.0 KB
PDF · package root
e62c7791990e0658…
177.2 KB
JS · v2.0.2/js
45e6e27bd25cdf72…
148.4 KB
JPG · v2.0.2/images/blog
8db84c9a432ba42f…
134.2 KB
JPG · v2.0.2/images/blog
8db84c9a432ba42f…
134.2 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
shell_exec
Runs an operating-system command
System command4
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.