Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPG · assets/images
df1c07885bd4e190…
95.9 KB
PHP · core/modules/vari-swatch
4e9ead1384b5db7f…
76.4 KB
JS · assets/build/admin
61de814a29f1c0eb…
50.2 KB
JS · assets/build/chunks
a5259056f009565d…
41.9 KB
CSS · assets/build/admin
8ba69c0db5639845…
41.0 KB
CSS · assets/build/admin
dfa922080ecc30be…
41.0 KB
CSS · core/modules/vari-swatch/assets/css
8485cd4fa00754d7…
32.8 KB
JS · core/modules/vari-swatch/assets/js
272552185339e0b7…
30.4 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.