Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · src/Admin
4713fe7eff286578…
39.7 KB
PHP · src/Frontend
d1ff3a875f0f0830…
33.6 KB
SVG · assets/images
77d10df600a614ae…
32.1 KB
SVG · assets/images
984d2b3318b21f70…
23.6 KB
MAP · assets/css
361f09fa8371d0de…
20.5 KB
PHP · includes/global
f6dabb7c0a000399…
18.3 KB
PHP · src/Functions
921230f78a68a5a3…
18.3 KB
SVG · assets/images
60854a66502b8e41…
18.2 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.