Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
WEBP · admin/assets/images/presets
2a07af1e38dc95c4…
80.4 KB
JS · public/js
593b0be2fef2ffaf…
36.8 KB
WEBP · admin/assets/images/presets
5aeef084d2503cdf…
25.2 KB
WEBP · admin/assets/images/presets
9fc62db972512723…
23.0 KB
WEBP · admin/assets/images/presets
d6917627f54bdc9d…
22.4 KB
WEBP · admin/assets/images/presets
9e88e1584cbd1056…
21.4 KB
WEBP · admin/assets/images/presets
e68717a0e8c600bc…
20.8 KB
WEBP · admin/assets/images/presets
3f90485d165a12ed…
20.0 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
2 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.