Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · bistly/assets/fonts/flaticon
279ec7e319a17aed…
275.1 KB
CSS · bistly/assets/css/plugins
3c8f27e6009ccfd7…
227.3 KB
JPG · Documentation/assets/images
68a6ad33e3e23135…
194.5 KB
WOFF2 · bistly/assets/fonts/fontawesome/webfonts
dbbe0d8ca25eef4e…
185.0 KB
CSS · bistly/assets/fonts/fontawesome/css
e7de3b4b49089f8c…
169.8 KB
WOFF2 · bistly/assets/fonts/fontawesome/webfonts
58f76b0b684536fb…
169.2 KB
JPG · bistly/assets/images/home-coffee/bg
699b854dc679e4de…
165.3 KB
WOFF2 · bistly/assets/fonts/fontawesome/webfonts
2a2399d510fe0bb9…
137.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.