MULTILOCA – WooCommerce Multi Locations Inventory Management
File type
ZIP archive
File size
1.12 MB (1,177,862 bytes)
Uncompressed size
4.55 MB
Oldest file
2026-03-04 20:15
Newest file
2026-06-05 07:49
Archive contents
Contained entries
348
Files
302
Directories
46
Distinct types
14
Analysis history
Last analysis
Sep 08, 2026, 11:35 PM UTC
Engine
ClamAV 1.5.4
Signature database
v28115
Product ID
#102730
Archive contents
348 entries · 14 types
Directories13.2%46
PHP42.8%149
JavaScript27.6%96
CSS9.2%32
PNG1.4%5
Text1.1%4
PO0.9%3
MO0.9%3
SVG0.9%3
JPEG0.6%2
GIF0.6%2
XML0.3%1
POT0.3%1
No Ext0.3%1
Largest files
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · admin
d21fc2ade88f532e…
225.1 KB
PHP · admin/partials
83366f087a23dcdd…
182.9 KB
PHP · admin/partials
db3281b2297f7330…
156.3 KB
PHP · public
025c8337a5a270bb…
102.5 KB
PNG · includes/images
b207bfc50434ff10…
100.2 KB
JS · public/js
a5d6dc455af7d885…
96.3 KB
JS · admin/js
7ae3da6cc19dc7b1…
91.5 KB
JS · public/js
3a6b119d056a8cc6…
71.2 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request21
unserialize
Unsafe when given untrusted input
Deserialization15
atob
Decodes base64 in the browser
Obfuscation4
file_get_contents(url)
Fetches a remote URL
Remote request2
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.