Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · divi-5/scripts
5973d64aac3e857b…
899.0 KB
JS · divi-4/visual-builder/build
0d7865bb7fea575d…
588.5 KB
POT · languages
199d1a07d6168698…
297.7 KB
CSS · divi-5/styles
8f16302ca43ede03…
227.1 KB
SVG · assets/images/flags
b6e08e2eca1ec4c2…
177.4 KB
PHP · divi-4/server/modules/NextWooCarousel
1fbd92cf6520cec0…
157.3 KB
PHP · divi-4/server/modules/NextWooFilterMasonry
67894aae0642dd60…
154.5 KB
JS · assets/js
73203b5c5f70f45b…
151.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.