Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/vendor/darkreader
ce0b18e9a89caf71…
337.9 KB
PHP · package root
f355c5d0071eba73…
108.5 KB
JS · assets/vendor/darkreader
d51754445db86ab8…
108.0 KB
JS · assets/js
c1072784deb1facd…
106.0 KB
PO · languages
5c494eb35e55f99a…
102.8 KB
PO · languages
5b7f8085b0e2c215…
101.5 KB
CSS · assets/css
8499fce43ed3408a…
97.7 KB
POT · languages
f43b9b71aedb6de0…
67.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
atob
Decodes base64 in the browser
Obfuscation4
Referenced hosts
7 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.