Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JS · dist
7df5328145445960…
344.1 KB
JS · dist
d8eabf91d8ef5376…
91.3 KB
POT · languages
ca2867bb8c42cafa…
73.7 KB
PHP · src/Updater/vendor
8b05d88976c788e4…
36.7 KB
PHP · src/Updater/vendor
64ca7b14926c1e6b…
36.4 KB
TXT · package root
57ea19d0e2c8360e…
34.3 KB
PHP · src/Updater/Puc/v4p9
1d7420f58539e911…
28.6 KB
PHP · src/Database
d28c320885ec075e…
26.5 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
new Function()
Builds a function from a string
Code execution3
unserialize
Unsafe when given untrusted input
Deserialization2
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation2
Referenced hosts
18 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.