Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TTF · 1.Recrute-Nextjs/public/assets/fonts
ef0c125163e15b48…
1.21 MB
TTF · 1.Recrute-Nextjs/public/assets/fonts
709d015ec16d7ce5…
1.21 MB
TTF · 1.Recrute-Nextjs/public/assets/fonts
d4eb15d2b72cec84…
1.10 MB
TTF · 1.Recrute-Nextjs/public/assets/fonts
6d814a4a1c1c50a1…
1013.7 KB
TTF · 1.Recrute-Nextjs/public/assets/fonts
85a820821f87aeb5…
886.4 KB
TTF · 1.Recrute-Nextjs/public/assets/fonts
50039bebe746a962…
875.9 KB
SVG · 2.Documentation/assets/css/vendor/fonts
d5b212510d72b66b…
797.8 KB
TTF · 1.Recrute-Nextjs/public/assets/fonts
a49b3fc5cd8468e7…
776.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution3
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.