Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
GIF · assets/img
0a692c63afbfa334…
28.8 KB
PHP · package root
c48d035080e8b3a9…
11.6 KB
PHP · modules
9bb706c8d3244fa4…
4.1 KB
POT · languages
7b2a5fa811896add…
2.3 KB
JS · assets/js
c8cbd2270eac209f…
2.2 KB
PHP · package root
a3f8e6d9ad8c90eb…
1.7 KB
TXT · package root
b590d2cd3adc38fb…
0.7 KB
CSS · assets/css
8f37d3eef5e463bb…
0.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization6
Referenced hosts
2 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.