Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · blocks/build/cross-sell
256d8be96820960b…
484.0 KB
JS · assets-vendor/intl-tel-input/js
79f3c45b909cb727…
455.1 KB
JS · assets/admin/js/ace-min-noconflict
d9babc3af3f4640f…
338.0 KB
CSS · assets/frontend/css/templates/modern
34e2da3df7502a46…
332.5 KB
CSS · assets/frontend/css/templates/modern
1d282da33febcee8…
332.4 KB
JS · assets-vendor/intl-tel-input/js
c36225a5f9fcc00f…
303.9 KB
CSS · assets/frontend/css/templates/modern
4b8dd6f61d8ddbff…
294.6 KB
CSS · assets/frontend/css/templates/modern
bbcc63e5a8ebe4a0…
294.6 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution3
new Function()
Builds a function from a string
Code execution2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.