Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · public/js
c56bbe11872fffb8…
259.6 KB
JS · public/js
3c2a2df920f9abc7…
247.2 KB
JS · admin/assets/js
cd6968278168e181…
26.5 KB
PNG · admin/assets/images
9bb4b229a2812d49…
24.8 KB
PHP · admin/includes
781cadc381ca943f…
16.9 KB
WEBP · admin/assets/images/presets
8770d3700e00f34a…
11.6 KB
PHP · admin/includes/modals
eff8c0844bb987a7…
10.6 KB
JSON · public/objects
cbac4d24e0cfeb4a…
5.4 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution4
Referenced hosts
3 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.