Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PSD · assets/cube/img
…
5.43 MB
SVG · admin/files/webfonts
96b9988db47361f8…
881.2 KB
PNG · assets/images
ff4f5ce0e2bd5b19…
861.3 KB
PNG · assets/images
6146bb460b1dcce4…
773.5 KB
PNG · assets/images
e0a9debdc73b8c7e…
773.5 KB
XML · assets
e56f854331d1462b…
706.1 KB
SVG · admin/files/webfonts
980a773627e3fc82…
702.6 KB
PNG · assets/images
bbaec4cc83b7c11b…
620.7 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request4
new Function()
Builds a function from a string
Code execution1
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.