Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · wootablespro/views
7088e38ad0b92982…
106.2 KB
PHP · wootablespro/views/tpl
5dafc3c54bfbb939…
42.3 KB
JS · wootablespro/js
e0f394a07f6cfc8a…
41.5 KB
PHP · wootablespro/views/tpl
16edc57e76306e5d…
39.2 KB
PHP · wootablespro/models
f82e0e67bf559cec…
28.4 KB
PHP · wootablespro
6dd77077020810d1…
25.0 KB
TXT · package root
dcb7c28341ae1586…
16.5 KB
JS · wootablespro/js
a9bf39c08f71021e…
15.5 KB
Code signals
2 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation4
unserialize
Unsafe when given untrusted input
Deserialization2
Referenced hosts
4 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.