Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
MAP · assets/dist/js
beb501152e6c3217…
321.5 KB
JS · assets/dist/js
7d0cf9b408d94b18…
251.6 KB
MAP · assets/dist/js
a9590cae205df6ca…
183.1 KB
JS · assets/dist/js
11a726d1a2404269…
142.2 KB
JS · assets/dist/js
8629d0898c5ce085…
100.2 KB
JS · assets/dist/js
f6ed0b733047dea6…
41.3 KB
PHP · inc/TemplateHooks
7382eaf6147d4aa0…
36.3 KB
MAP · assets/dist/js
1ded0f8d2338f605…
28.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution2
Referenced hosts
12 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.