Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TTF · vendor_prefixed/mpdf/mpdf/ttfonts
…
3.15 MB
TTF · vendor_prefixed/mpdf/mpdf/ttfonts
c80858440d8fb618…
1.49 MB
TTF · vendor_prefixed/mpdf/mpdf/ttfonts
973791e2bb5ef4ba…
1.25 MB
DAT · vendor_prefixed/mpdf/mpdf/data
8f5e4c12bf0d5fde…
1.00 MB
PHP · vendor_prefixed/mpdf/mpdf/src
5ae84b9d14945780…
941.6 KB
TTF · vendor_prefixed/mpdf/mpdf/ttfonts
1cef05c1ea5d88f0…
900.5 KB
TTF · vendor_prefixed/mpdf/mpdf/ttfonts
43ef481308dfb3aa…
745.8 KB
TTF · vendor_prefixed/mpdf/mpdf/ttfonts
38e39596c9daec67…
594.4 KB
Code signals
9 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation31
exec / system
Runs an operating-system command
System command15
unserialize
Unsafe when given untrusted input
Deserialization9
gzinflate
Decompresses a string in memory
Obfuscation7
eval
Executes a string as code
Code execution6
shell_exec
Runs an operating-system command
System command5
assert
Can execute a string as code on old PHP
Code execution3
curl_exec
Makes an outbound HTTP request
Remote request3
file_get_contents(url)
Fetches a remote URL
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.