Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/vendor/darkreader
ce0b18e9a89caf71…
337.9 KB
JS · assets/vendor/darkreader
d51754445db86ab8…
108.0 KB
CSS · assets/css
19f2059efa87ddb1…
95.5 KB
JS · assets/js
95388fcb5ee32cbd…
94.1 KB
PO · languages
e508a983f3afc699…
72.5 KB
PO · languages
0cb3df89df3b11fc…
71.9 KB
PHP · package root
5425d9f9026cafa3…
64.5 KB
POT · languages
c1a6dc3c532bea0e…
51.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation4
Referenced hosts
6 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.