Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes
…
2.03 MB
JS · assets/js
7f09d4832eaf033e…
190.2 KB
JS · assets/js
7cea237f2aa2c62c…
105.3 KB
JS · libraries/cmb2-field-font/js
4eeafba14d8c1220…
75.2 KB
JS · assets/js
82039c66180b3a09…
61.9 KB
JS · assets/js
0dc44d243978c299…
33.9 KB
JS · assets/js/bbp-commands
f24e9b33c27b2613…
30.4 KB
JS · assets/js/bbp-commands
a104032828c9fa60…
30.1 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
7 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.