Migrate between any two environments. Push, pull, and export full sites. Find and replace content including serialized data. Import and back up the database.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · frontend/build/static/js
0baaa2a577722ff0…
1.91 MB
JS · frontend/build/static/js
e10cc0feb82425a3…
379.0 KB
JS · frontend/build/static/js
cda18e76f00c69d8…
304.6 KB
PNG · frontend/build/static/media
52fa0c9278b91159…
298.6 KB
CSS · frontend/build/static/css
343ccf3c7f4a7055…
197.1 KB
POT · languages
6e818fce94e6a50a…
185.3 KB
PHP · class/Common/Sql
9d03457540bc0e54…
83.1 KB
PHP · class/Pro
b7f598e04d8ffeec…
47.4 KB
Code signals
6 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation19
gzinflate
Decompresses a string in memory
Obfuscation5
str_rot13
Trivial string obfuscation
Obfuscation4
unserialize
Unsafe when given untrusted input
Deserialization4
eval (JavaScript)
Executes a string as code
Code execution1
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.