Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PNG · img
3132526af61c7270…
287.0 KB
JPG · img/bg
ca708f5a55d48622…
186.7 KB
PHP · package root
27d0a2b9553f1954…
91.6 KB
JPG · img/bg
fa51618eb596d95a…
89.7 KB
JPG · img/bg
f0a20d4061ed6710…
77.0 KB
PHP · include/mailchimp/src/Mailchimp
b5e85bb7a3136909…
57.9 KB
CSS · css
7b65d0a5dd2e2d4c…
56.2 KB
JS · js
5c9561c0d99952df…
54.2 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution2
curl_exec
Makes an outbound HTTP request
Remote request2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.