Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CSS · public/assets/css
e25cf76e9213d7b2…
97.3 KB
CSS · public/assets/css
5bebc32fa1b99db2…
91.9 KB
PHP · inc
87caf7b793b1296c…
60.2 KB
PHP · inc
cb739abc6029a86c…
51.8 KB
JS · public/assets/js
07e8c460212bd9b8…
43.8 KB
JS · public/assets/js
aa12db0aa5a57c6b…
41.4 KB
PHP · package root
314d2e4a744cb8dd…
24.5 KB
PHP · inc
b7fa4c158791b603…
21.1 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.