Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
XML · inc/demo/lp
…
4.34 MB
XML · inc/demo/tl
…
3.02 MB
XML · inc/demo/rtl
beb7fd2a7c48f2ab…
1.84 MB
MAP · assets/bootstrap/css
2b3355477a7b5191…
663.8 KB
MAP · assets/bootstrap/css
f12338536350a422…
576.1 KB
MAP · assets/bootstrap/js
5aae1a596d6b41d2…
434.2 KB
TTF · assets/fonts/fontawesome/webfonts
31f099c13f6e4ba0…
413.7 KB
PNG · package root
1439e174e183d249…
278.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution14
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.