Migrate between any two environments. Push, pull, and export full sites. Find and replace content including serialized data. Import and back up the database.
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · frontend/build/static/js
…
2.02 MB
JS · frontend/build/static/js
c9095025e2a496a8…
380.5 KB
JS · frontend/build/static/js
0d8aa9e80038153f…
307.9 KB
PNG · frontend/build/static/media
52fa0c9278b91159…
298.6 KB
CSS · frontend/build/static/css
9342691009cf1378…
197.1 KB
PHP · class/Common/Sql
fbaf9b0708ec6c50…
80.3 KB
POT · languages
c4f99058ca22c84a…
68.8 KB
PHP · class/Pro
4997a993d7913b39…
47.4 KB
Code signals
5 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation19
gzinflate
Decompresses a string in memory
Obfuscation5
str_rot13
Trivial string obfuscation
Obfuscation4
unserialize
Unsafe when given untrusted input
Deserialization4
new Function()
Builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.