Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · package root
e417f2548290deb3…
505.8 KB
PHP · inc/onboarding
a961b161ca9b488c…
52.9 KB
CSS · package root
7289195b42fb10cc…
25.1 KB
CSS · inc/assets/css/admin
81b3830efe47cd19…
24.2 KB
CSS · inc/assets/css/admin
1b71fb900ee2c751…
18.8 KB
CSS · package root
5a057bf5bab731f0…
18.7 KB
PHP · inc
3a8d6196edb14132…
15.0 KB
PHP · inc/customizer
0d210007215ce1f8…
14.6 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
2 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.