Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · app
fce00e4db326f6b3…
396.9 KB
JS · app
2deba8165ab8ba33…
386.9 KB
PHP · classes
4bbf19250c5c9b98…
87.9 KB
PHP · classes
524277df8c9a8f33…
48.9 KB
PHP · premium
0495e1b6d700ce0b…
45.8 KB
PHP · common
c3ea97cfa271b285…
41.2 KB
JS · app
e0acbfe610819f61…
40.4 KB
TXT · package root
9aaa5fbcb22e8520…
26.9 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization3
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
18 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.