Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · assets/js
bbba19a8198ef7f9…
256.8 KB
TXT · includes/install
ac090642f31efbee…
242.6 KB
JSON · package root
e60df51e6c5a1387…
121.3 KB
PNG · assets/images/stock-images
2f88769cb04f4013…
80.3 KB
PNG · assets/images/stock-images
bb35c61d9239ef93…
71.1 KB
PNG · assets/images/stock-images
a2e46535ac934c8e…
70.5 KB
PNG · assets/images/stock-images
858a881f32429593…
57.7 KB
PNG · assets/images/template-themes
eeefe4d2da507b51…
52.5 KB
Code signals
0 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
None of the tracked constructs appear in this package.
Referenced hosts
16 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.