Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · cakeandbake_html/fonts/fontawesome/webfonts
981c7b389bbd9de1…
495.6 KB
MAP · documentation/css
daa4aebc002864fc…
372.1 KB
SVG · cakeandbake_html/fonts/fontawesome/webfonts
b0f3ece320e40f6c…
369.4 KB
PNG · documentation/images
c42f630ff9a50ffb…
267.6 KB
HTML · documentation/others
ce53333c1462c10a…
238.6 KB
JS · cakeandbake_html/js
99a8c497d189cc45…
219.1 KB
SVG · cakeandbake_html/fonts/flaticon
91afbb379a1b5da7…
194.5 KB
CSS · documentation/css
e6ba3f2e42d31fc2…
138.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution12
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.