Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MP4 · jayden/asset/images/bg-3d
…
8.72 MB
MP4 · jayden/asset/images/bg-3d
…
4.57 MB
MP4 · jayden/asset/images/bg-3d
…
2.79 MB
MP4 · jayden/asset/images/bg-3d
92862e021fd52c94…
1.78 MB
MP4 · jayden/asset/images/bg-3d
0bc7d73897a1b878…
1.60 MB
MP4 · jayden/asset/images/bg-3d
639839849f07889e…
734.7 KB
JPG · documentation/assets/images
ad51ead191100055…
649.7 KB
JPG · documentation/assets/images
91d78799ec4f0e3d…
575.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.