Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · divi-5/scripts
39879de83bc59d18…
842.3 KB
JS · divi-4/visual-builder/build
d62cf6bbc4a2b994…
586.7 KB
CSS · divi-5/styles
0a30621be03a5e4b…
224.4 KB
PHP · divi-4/server/modules/NextWooCarousel
ea0ccc27de08eede…
154.6 KB
PHP · divi-4/server/modules/NextWooFilterMasonry
4a0ed9aafba6b47f…
152.3 KB
JS · assets/js
d1d172ee6e1d93a2…
150.4 KB
JS · assets/js
36231d9ccbf45810…
137.6 KB
PHP · divi-4/server/modules/NextWooGrid
bf17d15cea641f45…
125.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution3
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.