Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · package/ph-file-uploads/assets/dist/js
047663b0e3c780a4…
191.5 KB
JS · package/ph-file-uploads/assets/dist/js
c012e89fc3ecc6f0…
191.2 KB
JS · assets/dist/js
7a94a025f266e82d…
190.5 KB
JS · assets/dist/js
d7c048226733fea1…
190.3 KB
JPG · cypress/fixtures
3d7e563009a6d21f…
166.6 KB
JPG · package/ph-file-uploads/cypress/fixtures
3d7e563009a6d21f…
166.6 KB
JS · package/ph-file-uploads/assets/dist/js
85199ba4e9b7c724…
122.3 KB
JS · assets/dist/js
47fcd393bffa6edd…
122.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution12
Referenced hosts
5 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.