Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · package root
…
10.74 MB
MP4 · click-store/assets
…
6.81 MB
PNG · documentation/documentation/images
425c5a109510a0fd…
1.08 MB
PNG · click-store/assets
5ba9137fa8df5f1f…
739.7 KB
LIQUID · click-store/assets
472345c0ad637004…
635.4 KB
PNG · click-store/assets
6c2b0fdbc0626d80…
551.8 KB
SVG · click-store/assets
c18b8fa5734a2b10…
486.9 KB
JS · documentation/documentation/js
b86529a3c1cbf54f…
250.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution7
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.