Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · package root
5755fa4ee97e3802…
236.2 KB
SVG · includes/fonts/fontawesome
b751f81b4b0db77c…
197.4 KB
PHP · includes/admin/tgm
0606aaea13ce21b6…
123.7 KB
TTF · includes/fonts/fontawesome
6b49348ad53886d0…
78.8 KB
JPG · includes/admin/getting-started
98c316e8d497b2f2…
59.2 KB
WOFF · includes/fonts/fontawesome
0fd28fece9ebd606…
43.4 KB
EOT · includes/fonts/fontawesome
39e237c07403e62f…
37.3 KB
CSS · package root
86539f0bf2effadc…
24.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
17 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.