Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
POT · languages
98e128cc5bdcc30b…
108.4 KB
PHP · includes/actions
1cf2f6e591ab39b6…
29.5 KB
PHP · includes/actions
c330ad9dc1b5a85a…
29.2 KB
PHP · includes
0a65e06db3daf28b…
20.1 KB
PHP · includes/actions
0b960a062141d820…
19.5 KB
PHP · package root
038b0c182f05ea35…
19.4 KB
PHP · includes
9d3a14474910158a…
19.3 KB
TXT · package root
40f15aa792add234…
18.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
5 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.