Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · package root
cb53695d1c818f62…
41.6 KB
PO · language
563a52e45a4643d6…
19.5 KB
FILE · package root
a45d0bb572ed792e…
17.6 KB
PHP · classes
bce5288fb9d27066…
17.3 KB
PO · language
470cd9831d2bb031…
16.8 KB
PO · language
470cd9831d2bb031…
16.8 KB
PO · language
141cf729a0ea1aa1…
16.6 KB
PO · language
acd23317bf99575d…
16.6 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization6
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.