Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · datatables
b2a068420724a445…
800.3 KB
JS · datatables/DataTables-1.10.11/js
57cb3e791f4c2f60…
436.5 KB
JS · datatables/jQuery-2.2.0
a18aa92dea997bd7…
252.3 KB
JS · datatables
b85b9402e2a4e1da…
202.8 KB
PHP · package root
b451fffd64db9e6b…
110.3 KB
JS · datatables/jQuery-2.2.0
8a102873a33f24f7…
83.6 KB
JS · datatables/DataTables-1.10.11/js
42c234455f4e7402…
80.5 KB
PHP · package root
d20827fac7f9d4a2…
79.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.