Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · img
2af5327d96ab6be2…
742.8 KB
PNG · img
2138665a57f90ebb…
439.2 KB
MAP · assets/bootstrap/css
5909107b92bd7cfe…
381.4 KB
MAP · bootstrap/css
5909107b92bd7cfe…
381.4 KB
PNG · img
9fd009440a32940e…
277.7 KB
SVG · assets/themify/fonts
f7af2e096c85c2ed…
228.8 KB
PNG · img
5f6c767fd8ca7a59…
205.9 KB
JPG · assets/img
2cc62ce4d6037b1f…
162.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.