Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · public/assets/fancybox
bc1affae98bd65d8…
28.2 KB
JS · public/assets/fancybox
cee70622e3e4a06d…
27.6 KB
JS · public/assets/js
3a86cdada5e5a318…
27.3 KB
PHP · public
56692929579de105…
25.8 KB
JS · public/assets/fancybox
596904dd33536d79…
21.1 KB
PHP · admin
97ca96d5d1ca33cf…
16.1 KB
PNG · public/assets/fancybox
324b9d944e39c915…
14.9 KB
PO · languages
9aa2f2e1df2276d0…
10.0 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.