Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
XML · demo_install/demo_file
ab505c92f3ecd2ed…
1.28 MB
JPG · assets/images/layouts/work-style
59b5780253a2851f…
488.4 KB
SVG · css/fonts/font-awesome
ad6157926c1622ba…
434.0 KB
JPG · assets/images/layouts/work-style
31f7832109efc544…
427.3 KB
ZIP · assets/rev_slider
4d796ba4a8e87441…
402.0 KB
JS · js/vendors-libs
7526f7c10f28c13d…
363.1 KB
PNG · package root
68f30b6623b0249f…
318.3 KB
ZIP · demo_install/demo_file/rev_slider
b1390c3f1d88d89d…
310.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization5
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.