Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · dist
5710ac4493d3c539…
110.0 KB
JS · dist
2c84ceb374c9da86…
104.1 KB
NEON · package root
55c6a57f112cf55b…
67.4 KB
PHP · classes
770fdb94e2b77d73…
47.8 KB
JS · assets/vendor/js
33e83a8ff379f95f…
40.9 KB
CSS · src/blocks/portfolio/front-end
b521cb08f5133ee1…
40.1 KB
JS · lib/nps-survey/dist
5ba51450e320bac5…
36.5 KB
PHP · classes
ddcaa44648e3a127…
35.7 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.