Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TTF · fonts
20521cf9377d28c1…
1.94 MB
TTF · fonts
f4a066f64574126c…
1.94 MB
TTF · fonts
2ebd93ea67141b23…
976.3 KB
TTF · fonts
87a056d8c3a7ab18…
870.7 KB
TTF · fonts
229b67ef16372975…
767.5 KB
CSS · css
87d82efdf0fda046…
454.7 KB
TTF · fonts
749369ed6a4b46a5…
403.1 KB
TTF · fonts
920f3f6352dabc30…
402.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation9
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.