Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
DB · Theme-HTML-v2/images
6716b2abf60b97f1…
440.0 KB
JPG · Birva Multipurpose HTML Theme-Documentation/assets/images
1ec1abf597d48933…
398.4 KB
JPG · Birva Multipurpose HTML Theme-Documentation/assets/images
edd39d9572458bb4…
296.1 KB
JPG · Birva Multipurpose HTML Theme-Documentation/assets/images
39499235412de410…
282.1 KB
JPG · Birva Multipurpose HTML Theme-Documentation/assets/images
43598ab520f05648…
233.6 KB
JPG · Birva Multipurpose HTML Theme-Documentation/assets/images
9b2e475f408edcb8…
229.4 KB
JPG · Birva Multipurpose HTML Theme-Documentation/assets/images
32b9bf074a9b3cad…
217.2 KB
JPG · Birva Multipurpose HTML Theme-Documentation/assets/images
3a8dca4607dac17c…
215.4 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.