Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
TXT · includes/cmb2
21eda9e7bee79eba…
101.7 KB
PHP · kadence-activation
afa3dc97146c9958…
58.2 KB
PHP · includes/cmb2/includes
a1edf4a7794268e7…
52.5 KB
CSS · includes/cmb2/css
1c012a90c667e84c…
49.4 KB
CSS · includes/cmb2/css
2fb3a544db24faa0…
49.4 KB
PHP · includes/cmb2/includes
b9a03b8394705c7b…
45.6 KB
CSS · includes/cmb2/css
fbcc6ac8caf437cc…
42.7 KB
CSS · includes/cmb2/css
791692d392bfc2f9…
42.7 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
eval (JavaScript)
Executes a string as code
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.