Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MP3 · default/video
…
3.92 MB
MP3 · menu-overlay/video
…
3.92 MB
MP3 · slide-bar/video
…
3.92 MB
MP3 · slider-over-menu/video
…
3.92 MB
JPG · assets/images
5601eb54042e270c…
647.2 KB
JPG · assets/images
6d62fb001d9272d8…
643.2 KB
JPG · assets/images
2651ea6c169fe33a…
611.3 KB
PNG · assets/images
5d53cb735c270fc0…
439.8 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization4
eval (JavaScript)
Executes a string as code
Code execution2
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.