Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
WEBM · upload/media
fa95ac0a5a352fcf…
1.04 MB
MP4 · upload/media
4839c06561f8f2e7…
1003.6 KB
MP4 · upload/cafe
fb1238b704a04f80…
965.2 KB
MP4 · upload/cafe
fb1238b704a04f80…
965.2 KB
WEBM · upload/cafe
6a664318ceee6d4e…
916.3 KB
WEBM · upload/cafe
6a664318ceee6d4e…
916.3 KB
MP4 · upload/agency
92ae418265d77277…
875.0 KB
MP4 · upload/service
92ae418265d77277…
875.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.