Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · includes/widget
d08b4606120566e6…
36.0 KB
PHP · includes
2342746d7a6b5cc2…
7.3 KB
PHP · package root
54f1e22a53bcede7…
6.0 KB
PHP · package root
c591fd2c846830f4…
5.7 KB
JS · assets/js
b94da8e1748f2a7d…
4.9 KB
PO · i18n
1025456df3fc8c3c…
3.2 KB
PO · i18n
b40c7cc670adbcb2…
3.1 KB
PO · i18n
cf59547b17cbd41f…
3.1 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation10
Referenced hosts
1 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.