Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · src/Admin
9e5d3f613ed630be…
39.0 KB
PHP · src/Frontend
94108e1161698524…
32.9 KB
SVG · assets/images
77d10df600a614ae…
32.1 KB
SVG · assets/images
984d2b3318b21f70…
23.6 KB
MAP · assets/css
361f09fa8371d0de…
20.5 KB
PHP · includes/global
f6dabb7c0a000399…
18.3 KB
PHP · src/Functions
f43100ebac62fd40…
18.3 KB
SVG · assets/images
60854a66502b8e41…
18.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.