Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · includes/modules/vue-ui/assets/js
b9f18495bdd39ceb…
333.5 KB
JS · includes/modules/vue-ui/assets/js
06d28313eb95891a…
295.6 KB
JS · assets/js/lib/ts-particles/3.0.2
fd3a0f3e86e7e9af…
165.3 KB
JS · assets/js/lib/ts-particles/1.18.11
5ede7abd188b3bb0…
137.3 KB
JS · includes/modules/vue-ui/assets/js
72194d152571dd37…
91.5 KB
JS · assets/js/lib/tippy
e5c6d8363bb34b27…
77.9 KB
JS · includes/modules/vue-ui/assets/js
0ff4096c7cfa4f1e…
74.9 KB
JS · assets/js/admin/blocks-views
700fc0baf851310a…
65.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution7
Referenced hosts
14 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.