Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · js
d89473371309892d…
1.15 MB
JS · js
a8ced04c94a5bed3…
1.08 MB
SVG · webfonts
86c7d89d0f0d29d8…
822.9 KB
SVG · webfonts
ed5bfbea42378c58…
684.1 KB
SVG · sprites
d513795cb81d4eff…
602.8 KB
JS · js
0f50b36e3c8d2db9…
570.5 KB
JS · js
7b228917427f8c13…
558.2 KB
SVG · sprites
5779e473aa634e37…
435.8 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation3
file_get_contents(url)
Fetches a remote URL
Remote request1
Referenced hosts
11 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.