Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CRT · api
a45dae7f401e9cf8…
219.8 KB
PHP · package root
86e6119ec7b92878…
48.1 KB
PHP · api
2ec5f1c2416535d0…
17.1 KB
PNG · images
fc0e4ab9246a11c3…
3.5 KB
PHP · woo-includes
52d12251d2d1dfa7…
3.1 KB
JS · package root
bc43b9c0b9e29b36…
2.9 KB
TXT · package root
07e7d65f6b311ce0…
2.5 KB
PNG · images
b99a47fcc38491b4…
2.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request2
Referenced hosts
9 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.