Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · package root
a4c34d042bf882a9…
116.8 KB
PHP · inc/onboarding
676b27e1fb9e5774…
53.4 KB
CSS · package root
d9d003371d1341b6…
24.3 KB
CSS · inc/assets/css/admin
c431c3de7435cfbc…
23.3 KB
CSS · inc/assets/css/admin
622a4eaae4980c40…
17.8 KB
CSS · package root
d82d33e3486f8eed…
17.5 KB
PHP · inc
f0d799dd73422539…
15.9 KB
PHP · inc/customizer
595fa3b0783e0f64…
14.5 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
2 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.