Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
b1ca2d885eaa51c9…
36.6 KB
TXT · package root
03fdcdce033d6d7c…
35.5 KB
TXT · package root
3972dc9744f6499f…
34.3 KB
CSS · package root
3acfa3927ed53183…
25.1 KB
CSS · package root
36169cc0f166a38b…
22.3 KB
PHP · berrypress-updater
4274a77fa89689ef…
20.0 KB
TXT · package root
24898200ec88dc97…
19.1 KB
PHP · berrypress-admin-framework
78ef79953daadeb6…
14.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization1
Referenced hosts
16 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.