Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
ZIP · package root
…
12.17 MB
PSD · package root
…
3.70 MB
ZIP · package root
…
2.81 MB
PSD · package root
538ba13900d67b93…
1.08 MB
GZ · package root
889b17086fc1d325…
1.05 MB
ZIP · package root
00aabfc70a625036…
602.3 KB
PNG · library/images
c2add64b8b6959bb…
299.6 KB
JPG · library/images
b1d8d0a4882e44c3…
91.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution1
Referenced hosts
17 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.