Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPG · undedwp-3.0.0/img/instagram
42cb6cfbe1877797…
1.20 MB
JPG · undedwp-3.0.0/img/project
010ce9243c545ae1…
1.04 MB
PNG · undedwp-3.0.0/img
cee8bff8b95b6c44…
992.6 KB
JPG · undedwp-3.0.0/img/hero
b9503cee360c36cd…
959.3 KB
ZIP · plugins
d6883f15872fd530…
932.0 KB
JPG · undedwp-3.0.0/img/team
e884f8453afe81a8…
927.9 KB
XML · data-export
9b060efdb1a8fac6…
923.0 KB
PNG · undedwp-3.0.0/img
2bf071e5be550e0f…
821.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.