Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
CRT · includes/libraries/stripe/data
08df40e8f528ed28…
210.3 KB
MD · includes/libraries/stripe
6980132800687dbe…
93.4 KB
PHP · includes
207745841d08b833…
71.0 KB
PHP · includes
eaa78425170ca8c2…
32.6 KB
JS · assets/js/frontend
3a0dcf3aaac00110…
32.1 KB
PHP · includes/libraries/stripe/lib
732bb4df3a85a048…
31.1 KB
PHP · includes/libraries/stripe/lib/HttpClient
5de6e5d3953d1e7b…
24.1 KB
JS · assets/js/admin
750c950c14439517…
23.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.