Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
WEBP · admin/assets/images/presets
24e1d1a9ede6447c…
10.1 KB
JS · public/js
5d0efa3977ebdfa2…
8.9 KB
JS · admin/assets/js
1d0517bffa75c6a5…
6.8 KB
PHP · admin/includes/modals
2144c3b4e7072cc3…
6.5 KB
JS · admin/assets/js
1b477e43f0f14fa5…
4.4 KB
JSON · admin/assets
cae31fd53998edbf…
3.8 KB
PHP · package root
7ab18f945f06748f…
2.1 KB
PHP · package root
b59a545c23991ca4…
1.8 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
2 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.