Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
4e121284d67eb1c2…
110.2 KB
PHP · classes
8f71c5038e26c7e2…
79.8 KB
PHP · classes
5dd8cd8e04dc8f1a…
65.0 KB
PHP · classes
7b78e0f3e92cc669…
50.1 KB
PO · language
5f2c9f1350b3d42a…
38.5 KB
PO · language
4a60efbf1fa932c6…
34.8 KB
PO · language
4a60efbf1fa932c6…
34.8 KB
PO · language
549c967748c6ffc1…
33.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
10 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.