Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TXT · vendor/bjeavons/zxcvbn-php/data
…
2.25 MB
JSON · vendor/bjeavons/zxcvbn-php/src/Matchers
186120e07b8dfe9b…
1.02 MB
TXT · vendor/bjeavons/zxcvbn-php/data
6313cc5ef683a046…
877.3 KB
TXT · vendor/bjeavons/zxcvbn-php/data
b0704e8a43437ce9…
841.4 KB
TXT · vendor/bjeavons/zxcvbn-php/data
4ec7babc98a4ed03…
679.1 KB
MD · package root
3972dc9744f6499f…
34.3 KB
TXT · vendor/bjeavons/zxcvbn-php/data
9067937d9acdafb6…
29.3 KB
PHP · vendor/symfony/polyfill-mbstring
6a41fab9e7100d2e…
27.5 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation1
Referenced hosts
11 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.