Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · src/deprecated/Mailchimp
ee783842fd041e9d…
55.3 KB
PHP · src/deprecated/Mailchimp
cde1b5d3ab63eae1…
28.5 KB
PHP · src/deprecated/Mailchimp
83e0fdd1ebab5d08…
27.9 KB
PHP · vendor/composer
42b8c5525dbc1330…
16.1 KB
PHP · vendor/composer
3343ca2bf56e8116…
14.7 KB
PHP · src/deprecated/Mailchimp
f246e29ce822f7b7…
12.7 KB
PHP · lib/NfBridge/Actions
4efb5ff1177ebb4c…
11.8 KB
PHP · src/deprecated
87cdb88f2deece4a…
10.9 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.