Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · images/previews/filmstrip
33d36f09145c9682…
1.75 MB
PNG · images/previews/filmstrip
d82c1f613ac18bc1…
1.53 MB
PNG · images/previews/slideshow
d73c6baaf9906cc9…
1.41 MB
PNG · images/previews/filmstrip
b9c0b776d6ee67b4…
1.38 MB
PNG · images/previews/filmstrip
5f753e13ba4ba24b…
1.28 MB
PNG · images/previews/slideshow
1a5f99ca91f68579…
1.18 MB
PNG · images/previews/filmstrip
283ab3b94edefdb9…
1.18 MB
PNG · images/previews/slideshow
b2fad929d5226269…
1.18 MB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.