Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes
8b441b9e7a32ff4e…
14.9 KB
TXT · vendor/a5hleyrich/wp-background-processing
f5a3e6ece3df0648…
14.8 KB
PHP · vendor/drewm/mailchimp-api/src
200695e1497007bb…
14.2 KB
PHP · vendor/composer
7ceb118bc1aacf96…
14.0 KB
PHP · includes
7bc459eea9293885…
14.0 KB
PHP · models
78bd205b879cd87e…
11.8 KB
PHP · package root
97110d924799d2c4…
11.6 KB
PHP · includes
18f74fb78a1021d1…
10.8 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
curl_exec
Makes an outbound HTTP request
Remote request1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.