Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/dist/js
b3dc76362febf986…
1.15 MB
JS · assets/dist/js
299a3bea7309c509…
788.0 KB
JS · package root
b94f843d1970423f…
764.1 KB
JS · assets/dist/js
6820168df648a4ce…
400.7 KB
JS · assets/dist/js
af275c70cbbc24f0…
385.7 KB
JS · assets/dist/js
8d887525fddd47a9…
381.0 KB
JS · assets/dist/js
8ca2e88882f0079e…
371.2 KB
JPG · cypress/fixtures
3d7e563009a6d21f…
166.6 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution16
atob
Decodes base64 in the browser
Obfuscation10
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.